CSRF javascript is not injected properly

Dear all,

 

I have configured the csrf protection in my policy but it seems that the javascript injected only if i refresh the page. In case there is no any uri in csrf policy, the javascript is injected in all uris? Is the csrf token stored in a TS cookie?

 

Thank you in advance.!