Merge pull request #38272 from mitodl/asad/pick-csrf-from-cookie

fix: read latest CSRF token from cookie

Author: pdpinch

lms/static/js/main.js

@@ -7,8 +7,10 @@
 
   $(function() {
     $.ajaxSetup({
-      headers: {
-        'X-CSRFToken': $.cookie('csrftoken')
+      beforeSend: function(xhr, settings) {
+        if (!(/^(GET|HEAD|OPTIONS|TRACE)$/i.test(settings.type)) && !this.crossDomain) {
+          xhr.setRequestHeader('X-CSRFToken', $.cookie('csrftoken'));
+        }
       },
       dataType: 'json'
     });