CSRF javascript is not injected properly

Dear all,

I have configured the csrf protection in my policy but it seems that the javascript injected only if i refresh the page. In case there is no any uri in csrf policy, the javascript is injected in all uris? Is the csrf token stored in a TS cookie?

Thank you in advance.!