diff --git a/http_cache/form_csrf_caching.rst b/http_cache/form_csrf_caching.rst index 1acfe38ccc3..41aba4c0eab 100644 --- a/http_cache/form_csrf_caching.rst +++ b/http_cache/form_csrf_caching.rst @@ -36,7 +36,8 @@ Another option would be to load the form via an uncached AJAX request, but cache the rest of the HTML response. Or you can even load just the CSRF token with an AJAX request and replace the -form field value with it. +form field value with it. Take a look at :doc:`hinclude.js ` +for a nice solution. .. _`Cross-site request forgery`: http://en.wikipedia.org/wiki/Cross-site_request_forgery .. _`Security CSRF Component`: https://github.com/symfony/security-csrf