Merge pull request #139 from devin60070/patch-1

Update csrf.rst
wtforms · Aug 26, 2014 · 5498c7c · 5498c7c
2 parents 79dd8ae + 3fb7fe5
commit 5498c7c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/csrf.rst b/docs/csrf.rst
@@ -110,7 +110,7 @@ Whenever you send a AJAX POST request, add the ``X-CSRFToken`` for it:
 
     $.ajaxSetup({
         beforeSend: function(xhr, settings) {
-            if (!/^(GET|HEAD|OPTIONS|TRACE)$/i.test(settings.type)) {
+            if (!/^(GET|HEAD|OPTIONS|TRACE)$/i.test(settings.type) && !this.crossDomain) {
                 xhr.setRequestHeader("X-CSRFToken", csrftoken)
             }
         }