Skip to content

O
OHR Support
Commit 61c00779 authored by Andrew Smith's avatar Andrew Smith Committed by Felix Schäfer
Browse files
Options

Set the X-CSRF-Token header for AJAX requests with jQuery. #950

parent 375045a8
Hide whitespace changes
Inline Side-by-side
Showing with 9 additions and 1 deletion
public/javascripts/application.js
View file @ 61c00779
......@@ -467,7 +467,15 @@ jQuery.viewportHeight = function() {
// Automatically use format.js for jQuery Ajax
jQuery.ajaxSetup({
'beforeSend': function(xhr) {xhr.setRequestHeader("Accept", "text/javascript")}
'beforeSend': function(xhr) {
xhr.setRequestHeader("Accept", "text/javascript");
// TODO: Remove once jquery-rails (Rails 3) has been added a dependency
var csrf_meta_tag = jQuery('meta[name="csrf-token"]');
if (csrf_meta_tag) {
xhr.setRequestHeader('X-CSRF-Token', csrf_meta_tag.attr('content'));
}
}
})
/* TODO: integrate with existing code and/or refactor */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment