Skip to content

Instantly share code, notes, and snippets.

@hugollm
Created June 13, 2017 13:17
Show Gist options
  • Save hugollm/f51953cf66e4e7d0701fc187b0c3eeb6 to your computer and use it in GitHub Desktop.
Save hugollm/f51953cf66e4e7d0701fc187b0c3eeb6 to your computer and use it in GitHub Desktop.
CSRF ajax setup for Django and JQuery
// https://docs.djangoproject.com/en/1.11/ref/csrf/#ajax
$.ajaxSetup({
beforeSend: function(xhr, settings) {
if (!csrfSafeMethod(settings.type) && !this.crossDomain) {
xhr.setRequestHeader("X-CSRFToken", getCookie('csrftoken'));
}
}
});
function getCookie(name) {
var cookieValue = null;
if (document.cookie && document.cookie !== '') {
var cookies = document.cookie.split(';');
for (var i = 0; i < cookies.length; i++) {
var cookie = jQuery.trim(cookies[i]);
if (cookie.substring(0, name.length + 1) === (name + '=')) {
cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
break;
}
}
}
return cookieValue;
}
function csrfSafeMethod(method) {
// these HTTP methods do not require CSRF protection
return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment