为了解决CSRF问题,我使用客户端Ajax设置:
直到今天,一切都运作良好。但现在我需要在发帖之前进行一些检查:
$.ajaxSetup({
beforeSend: function(xhr, settings) {
function getCookie(name) {
var cookieValue = null;
if (document.cookie && document.cookie != '') {
var cookies = document.cookie.split(';');
for (var i = 0; i < cookies.length; i++) {
var cookie = jQuery.trim(cookies[i]);
// Does this cookie string begin with the name we want?
if (cookie.substring(0, name.length + 1) == (name + '=')) {
cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
break;
}
}
}
return cookieValue;
}
if (!(/^http:.*/.test(settings.url) || /^https:.*/.test(settings.url))) {
// Only send the token to relative URLs i.e. locally.
xhr.setRequestHeader("X-CSRFToken", getCookie('csrftoken'));
}
}
});
直到今天,一切都运作良好。但现在我需要在发帖之前进行一些检查:
var check;
//...
$.ajax({
//...
beforeSend: function(xhr){
if (check == 1){
xhr.abort();
}
},
success: function(data){
//...
}
});
CSRF验证失败,请求被中止。据我了解,只需取消新函数的ajaxSetup操作即可。如何将这两个操作结合起来?