diff --git a/Composer/packages/server/src/server.ts b/Composer/packages/server/src/server.ts
index 57fde3736b..bd33dce21b 100644
--- a/Composer/packages/server/src/server.ts
+++ b/Composer/packages/server/src/server.ts
@@ -124,7 +124,10 @@ export async function start(electronContext?: ElectronContext): Promise<number |
   });
 
   app.get(`${BASEURL}/plugin-host.html`, (req, res) => {
-    res.render(path.resolve(clientDirectory, 'plugin-host.ejs'), { __nonce__: req.__nonce__ });
+    res.render(path.resolve(clientDirectory, 'plugin-host.ejs'), {
+      __nonce__: req.__nonce__,
+      __csrf__: authService.csrfToken,
+    });
   });
 
   app.get('*', (req, res) => {