Made CSRF JavaScript example more reusable.
@@ -150,12 +150,13 @@ Finally, you'll need to set the header on your AJAX request. Using the
const request = new Request(
/* URL */,
- {headers: {'X-CSRFToken': csrftoken}}
- );
- fetch(request, {
+ {
method: 'POST',
+ headers: {'X-CSRFToken': csrftoken},
mode: 'same-origin' // Do not send CSRF token to another domain.
- }).then(function(response) {
+ }
+ );
+ fetch(request).then(function(response) {
// ...
});
