Django AJAX csrf

原创

wx5935381fcc679 2021-07-14 11:09:45 ©著作权

©著作权归作者所有：来自51CTO博客作者wx5935381fcc679的原创作品，请联系作者获取转载授权，否则将追究法律责任

1、原始

a、在HTML中添加

{% csrf_token %}

b、在data中添加csrf_token对应input的键值对

"csrfmiddlewaretoken" : $("[name='csrfmiddlewaretoken']").val()

2、保存到一个JS文件，并像JQuery一样引用即可

function getCookie(name) {
    var cookieValue = null;
    if (document.cookie && document.cookie !== '') {
        var cookies = document.cookie.split(';');
        for (var i = 0; i < cookies.length; i++) {
            var cookie = jQuery.trim(cookies[i]);
            // Does this cookie string begin with the name we want?
            if (cookie.substring(0, name.length + 1) === (name + '=')) {
                cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
                break;
            }
        }
    }
    return cookieValue;
}
var csrftoken = getCookie('csrftoken');

function csrfSafeMethod(method) {
  // these HTTP methods do not require CSRF protection
  return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}

$.ajaxSetup({
  beforeSend: function (xhr, settings) {
    if (!csrfSafeMethod(settings.type) && !this.crossDomain) {
      xhr.setRequestHeader("X-CSRFToken", csrftoken);
    }
  }
});