// Set global vars
var CSRFToken = "2532c51c1223705ed5b449ff616bf4f9d18646bbc5ed5a6aa2dff12af8553b53";
var $xo = jQuery.noConflict();
var $jq = $xo;
if (delete $) {
$ = $xo;
} else {
var $ = $xo; // Previously defined with var
}
// Register jquery vars to add CSRF headers to ajax() calls
setSpecificRequestHeader("$xo");
setSpecificRequestHeader("$jq");
setSpecificRequestHeader("$");
setSpecificRequestHeader("jQuery");
// Add CSRF headers to all jQuery ajax() calls that start with '/api/v[0-9]/'.
function setSpecificRequestHeader(jqtype)
{
if (typeof window[jqtype] == 'function')
{
window[jqtype](document).ajaxSend(function( event, request, settings )
{
var urlinfo = new URL(settings.url, window.location.href); // Parse the url (based off of the current url if relative)
if (urlinfo.hostname == window.location.hostname && /\/api\/v[0-9]\//.test(urlinfo.pathname))
{
// Add the CSRF token to all XO API calls
request.setRequestHeader("X-CSRFToken", CSRFToken);
}
});
}
}
// Re-apply the CSRF addition to "$" any time a new jQuery is added to the site
function reapplyCSRFSetup()
{
setSpecificRequestHeader("$");
}
// Observe any DOM changes that attempt to add a new jquery script
// If found, re-apply CSRF setup
var xoObserver = new MutationObserver(function (mutations)
{
mutations.forEach(function (mutation)
{
mutation.addedNodes.forEach(function (node)
{
if (node.tagName && node.tagName.toLowerCase() === 'script' && node.src)
{
// Match only scripts that look like the actual jQuery library
var regex = /jquery(?:\.min)?(?:-\d+\.\d+\.\d+)?\.js(\?.*)?$/i;
if (regex.test(node.src))
{
// Check for an existing onload handler
if (node.onload)
{
var originalOnLoad = node.onload;
node.onload = function ()
{
originalOnLoad.apply(this); // Call original onload
reapplyCSRFSetup.apply(this); // Reapply CSRF setup when a new jQuery script is added
};
}
else
{
node.onload = reapplyCSRFSetup; // Reapply CSRF setup when a new jQuery script is added
}
}
}
});
});
});
xoObserver.observe(document.documentElement, { childList: true, subtree: true });