var ajax = $.ajax $.extend({ ajax: function(url, options) { if (typeof url === 'object') { options = url; url = undefined; } options = options || {}; url = options.url; var xsrftoken = $('meta[name=_xsrf]').attr('content'); var headers = options.headers || {}; var domain = document.domain.replace(/\./ig, '\\.'); if (!/^(http:|https:).*/.test(url) || eval('/^(http:|https:)\\/\\/(.+\\.)*' + domain + '.*/').test(url)) { headers = $.extend(headers, {'x-xsrftoken':xsrftoken}); } options.headers = headers; return ajax(url, options); } }); // var xsrf = $("input[name ='_xsrf']"); // var _xsrf; // if (xsrf.length > 0) { // _xsrf = xsrf[0].value; // }