diff --git a/libraries/common.inc.php b/libraries/common.inc.php
index 3785c7f438..4922999b91 100644
--- a/libraries/common.inc.php
+++ b/libraries/common.inc.php
@@ -382,9 +382,8 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST') {
         /**
          * We don't allow any POST operation parameters if the token is mismatched
          * or is not provided
-         *
          */
-        $whitelist = array();
+        $whitelist = array('ajax_request');
         PMA\libraries\Sanitize::removeRequestVars($whitelist);
     }
 }