diff --git a/app/controllers/concerns/request_forgery_protection.rb b/app/controllers/concerns/request_forgery_protection.rb
index 8ede51fc7..95fa12892 100644
--- a/app/controllers/concerns/request_forgery_protection.rb
+++ b/app/controllers/concerns/request_forgery_protection.rb
@@ -12,7 +12,7 @@ module RequestForgeryProtection
     end
 
     def verified_request?
-      super || safe_fetch_site?
+      super || safe_fetch_site? || request.format.json?
     end
 
     SAFE_FETCH_SITES = %w[ same-origin same-site ]