|
@@ -7,6 +7,41 @@ |
|
|
*/ |
|
|
*/ |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
function _getCookie(name) { |
|
|
|
|
|
var cookieValue = null; |
|
|
|
|
|
if (document.cookie && document.cookie !== '') { |
|
|
|
|
|
var cookies = document.cookie.split(';'); |
|
|
|
|
|
for (var i = 0; i < cookies.length; i++) { |
|
|
|
|
|
var cookie = jQuery.trim(cookies[i]); |
|
|
|
|
|
// Does this cookie string begin with the name we want? |
|
|
|
|
|
if (cookie.substring(0, name.length + 1) === (name + '=')) { |
|
|
|
|
|
cookieValue = decodeURIComponent(cookie.substring(name.length + 1)); |
|
|
|
|
|
break; |
|
|
|
|
|
} |
|
|
|
|
|
} |
|
|
|
|
|
} |
|
|
|
|
|
return cookieValue; |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
function getCSRFToken() { |
|
|
|
|
|
return _getCookie('csrftoken'); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
function csrfSafeMethod(method) { |
|
|
|
|
|
// these HTTP methods do not require CSRF protection |
|
|
|
|
|
return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method)); |
|
|
|
|
|
} |
|
|
|
|
|
$.ajaxSetup({ |
|
|
|
|
|
beforeSend: function(xhr, settings) { |
|
|
|
|
|
if (!csrfSafeMethod(settings.type) && !this.crossDomain) { |
|
|
|
|
|
xhr.setRequestHeader("X-CSRFToken", getCSRFToken()); |
|
|
|
|
|
} |
|
|
|
|
|
} |
|
|
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
function renderTemplate(templateId, context) { |
|
|
function renderTemplate(templateId, context) { |
|
|
var template = Handlebars.compile($(templateId).html()); |
|
|
var template = Handlebars.compile($(templateId).html()); |
|
|
return template(context); |
|
|
return template(context); |
|
|