From 99cd76e2734694d22861b7c224fd1e2dcb643fa0 Mon Sep 17 00:00:00 2001 From: Brian Rosner Date: Thu, 14 Jul 2011 18:36:05 +0000 Subject: [PATCH] Added a note about the AJAX CSRF example not working on jQuery 1.5 git-svn-id: http://code.djangoproject.com/svn/django/trunk@16543 bcc190cf-cafb-0310-a4f2-bffc1f526a37 --- docs/ref/contrib/csrf.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index 93a7bb7c65..50e15d7f94 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -128,6 +128,11 @@ that allow headers to be set on every request. In jQuery, you can use the } }); +.. note:: + + Due to a bug introduced in jQuery 1.5, the example above will not work + correctly on that version. Make sure you are running at least jQuery 1.5.1. + Adding this to a javascript file that is included on your site will ensure that AJAX POST requests that are made via jQuery will not be caught by the CSRF protection.