From 1ff0ea509d44fc254c4bbee46d77137fa5c09d2f Mon Sep 17 00:00:00 2001 From: blink38 Date: Thu, 2 Jun 2016 09:51:04 +0200 Subject: [PATCH] CSRF token in Ajax request Add CSRF token to Ajax request if there are existing in META. Usefull for example if your are using a framework on server-side which protect you from CSRF attack. Like spring-security framework. --- jquery.dynatable.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/jquery.dynatable.js b/jquery.dynatable.js index 9285e1e..df01c32 100644 --- a/jquery.dynatable.js +++ b/jquery.dynatable.js @@ -232,6 +232,13 @@ type: _this.settings.dataset.ajaxMethod, dataType: _this.settings.dataset.ajaxDataType, data: data, + beforeSend: function(request){ + var token = $("meta[name='_csrf']").attr("content"); + if (!token) token = ""; + var header = $("meta[name='_csrf_header']").attr("content"); + if (!header) header = ""; + request.setRequestHeader(header, token); + }, error: function(xhr, error) { _this.$element.trigger('dynatable:ajax:error', {xhr: xhr, error : error}); },