（缺少CSRF令牌或不正確。）在Django中使用AJAX

Question

因此，我嘗試使用Ajax為我的Django項目創建一些基本的搜索功能。 但是，我不斷收到有關CSRF令牌的錯誤。 這是我模板中的javascript：

<script type='text/javascript'>
var csrftoken = Cookies.get('csrftoken');

function csrfSafeMethod(method) {
    // these HTTP methods do not require CSRF protection
    return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
$.ajaxSetup({
    beforeSend: function (xhr, settings) {
        if (!csrfSafeMethod(settings.type) && !this.crossDomain) {
            xhr.setRequestHeader("X-CSRFToken", csrftoken);
        }
    }
});


$('#search').keyup(function () {
    var search_text = $(this).val();
    console.log(search_text);

    $.ajax({
        type: "POST",
        url: "/search/",
        data: {
            'search_text': search_text,
        },
        success: function (data) {
            console.log('it worked');
        },
    });
});

</script> 

任何想法為什么這不起作用？

Answer 1

嘗試將其放在$(document).ready(function(){})

像這樣：

$(document).ready(function(){
    var csrftoken = Cookies.get('csrftoken');

function csrfSafeMethod(method) {
    // these HTTP methods do not require CSRF protection
    return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
$.ajaxSetup({
    beforeSend: function (xhr, settings) {
        if (!csrfSafeMethod(settings.type) && !this.crossDomain) {
            xhr.setRequestHeader("X-CSRFToken", csrftoken);
        }
    }
});


$('#search').keyup(function () {
    var search_text = $(this).val();
    console.log(search_text);

    $.ajax({
        type: "POST",
        url: "/search/",
        data: {
            'search_text': search_text,
        },
        success: function (data) {
            console.log('it worked');
        },
    });
});
)}