//the value of CSRF token from the cookie function GetCookie (name) {var cookievalue=null; if(Document.cookie && Document.cookie!=="') {var cookies= Document.cookie.split (';'); for(var i = 0; i < cookies.length; i++) {var cookie=Jquery.trim (Cookies[i]); //Does This cookie, string begin with the name we want? if(cookie.substring (0, name.length + 1) = = = (name +'=') ) {Cookievalue= decodeURIComponent (cookie.substring (name.length + 1)); Break; } } } returnCookievalue;} var Csrftoken= GetCookie ('Csrftoken');//The CSRF token value is set to the AJAX request header, and subsequent AJAX requests will automatically carry this csrf tokenfunction Csrfsafemethod (method) {These HTTP methods do notRequire CSRF protectionreturn(/^ (get| head| options| TRACE) $/. Test (method));} $.ajaxsetup ({beforesend:function (XHR, settings) {if(!csrfsafemethod (Settings.type) &&!this.crossdomain) {Xhr.setrequestheader ("X-csrftoken", Csrftoken); } }});
Ajax Configuration CSRF