diff --git a/notebook/static/base/js/utils.js b/notebook/static/base/js/utils.js index b31a67c8b..fd8fe454c 100644 --- a/notebook/static/base/js/utils.js +++ b/notebook/static/base/js/utils.js @@ -681,6 +681,12 @@ define([ settings = _add_auth_header(settings); return $.ajax(url, settings); }; + + var _get_cookie = function (name) { + // from tornado docs: http://www.tornadoweb.org/en/stable/guide/security.html + var r = document.cookie.match("\\b" + name + "=([^;]*)\\b"); + return r ? r[1] : undefined; + } var _add_auth_header = function (settings) { /** @@ -691,7 +697,7 @@ define([ settings.headers = {}; } if (!settings.headers.Authorization) { - var xsrf_token = get_body_data('xsrfToken'); + var xsrf_token = _get_cookie('_xsrf'); if (xsrf_token) { settings.headers['X-XSRFToken'] = xsrf_token; } diff --git a/notebook/templates/page.html b/notebook/templates/page.html index 4107c8af4..c39dea26b 100644 --- a/notebook/templates/page.html +++ b/notebook/templates/page.html @@ -115,7 +115,6 @@