assets/contao/js/core-uncompressed.js

@@ -527,10 +527,10 @@ var AjaxRequest =
 		// Send request
 		if (publish) {
 			image.src = image.src.replace('invisible.gif', 'visible.gif');
-			new Request.Contao({'url':window.location.href, 'followRedirects':false}).get({'tid':id, 'state':1});
+			new Request.Contao({'url':window.location.href, 'followRedirects':false}).get({'tid':id, 'state':1, 'rt':Contao.request_token});
 		} else {
 			image.src = image.src.replace('visible.gif', 'invisible.gif');
-			new Request.Contao({'url':window.location.href, 'followRedirects':false}).get({'tid':id, 'state':0});
+			new Request.Contao({'url':window.location.href, 'followRedirects':false}).get({'tid':id, 'state':0, 'rt':Contao.request_token});
 		}
 
 		return false;
@@ -1881,9 +1881,6 @@ var Backend =
 			li.destroy();
 			opt.fireEvent('liszt:updated');
 		}
-
-		// Remove the tool tip of the delete button
-		$$('div.tip-wrap').destroy();
 	},
 
 	/**