Fixes AJAX requests for jQuery 1.5 because of new CSRF requirements

[parndt]

As per http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails

[parndt]

I've updated this to fix both jQuery versions. Confirmed in a previously failing application (refinerycms) using jQuery 1.4.3 (required version by this script) and jQuery 1.5.

[parndt]

Better/passing tests are on their way..

[parndt]

Ready to roll!

[mislav]

Sorry to break it to you: we've duplicated efforts. I've already fixed this yesterday but didn't push because of some broken tests in IE.

Your approach is brittle, however: you've extended ajaxSettings with a beforeSend callback. This will work as long as the user doesn't specify a beforeSend callback of their own. As soon as they do, your hook is overridden and has no effect.

[parndt]

Our approach came directly from here http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails

At any rate, I'm glad it's fixed in core! I've tried out your solution and it has exactly the same result in my 3.0.4 app (i.e. it works!)

Thanks, Mislav. Also, congrats on the new position.