AngularXSRF.js

// Angular 1.2+

function sendReq(config, reqData) {

  /* SNIP */

  if (isUndefined(cachedResp)) {
    var xsrfValue = urlIsSameOrigin(config.url)
        ? $$cookieReader()[config.xsrfCookieName || defaults.xsrfCookieName]
        : undefined;
    if (xsrfValue) {
      reqHeaders[(config.xsrfHeaderName || defaults.xsrfHeaderName)] = xsrfValue;
    }

// Angular 2

export class CookieXSRFStrategy implements XSRFStrategy {
  constructor(
      private _cookieName: string = 'XSRF-TOKEN',
      private _headerName: string = 'X-XSRF-TOKEN') {}

  configureRequest(req: Request) {
    let xsrfToken = __platform_browser_private__.getDOM().getCookie(this._cookieName);
    if (xsrfToken && !req.headers.has(this._headerName)) {
      req.headers.set(this._headerName, xsrfToken);
    }
  }
}