Re: Unable to add CSRF token to the header

2014-06-26 Thread Roman Klesel
Hello, I'm not quite sure what you are trying to do, but with type: "GET" there is no need to worry about crfs_token. >From the link you posted: """ function csrfSafeMethod(method) { // these HTTP methods do not require CSRF protection return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));

Unable to add CSRF token to the header

2014-06-22 Thread Subodh Nijsure
[ Sorry this is duplicate as I posted previous messages without Subject: !! ] I have following ajax query that gets generated from my template. This is done after user has logged into the system. One thing I have noticed is very first GET request always prompts a dialog box that asks users to