Django Ajax CSRF setup.

ajax-setup.js

(function() {
  var matches = /(;\s*|^)csrftoken=([^;]+)/.exec(document.cookie || "");
  
  if (matches) {
    var token = decodeURIComponent(matches[2]);
    
    $.ajaxSetup({
      beforeSend: function(xhr, settings) {
        // These HTTP methods do not require CSRF protection.
        if (!/^(GET|HEAD|OPTIONS|TRACE)$/.test(settings.type) && !this.crossDomain) {
          xhr.setRequestHeader("X-CSRFToken", token);
        }
      }
    });
  }
})();