diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index 8c00304560..6d9a33db22 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -123,6 +123,11 @@ Adding this to a javascript file that is included on your site will ensure that AJAX POST requests that are made via jQuery will not be caught by the CSRF protection. +The above code could be simplified by using the `jQuery cookie plugin +`_ to replace ``getCookie``, and +`settings.crossDomain `_ in jQuery 1.5 and +later to replace ``sameOrigin``. + The decorator method --------------------