Add security hardenings to $.ajax()#19014

Merged

DeepDiver1975 merged 3 commits intomasterfrom dont-add-requestheaders-for-cross-domain-requests

Sep 15, 2015

+19-3

Commits on Sep 15, 2015

Do not add sensitive request headers for cross domain requests
LukasReschke
committed
Disable automatic evaluation of responses
LukasReschke
committed
Merge branch 'master' into dont-add-requestheaders-for-cross-domain-requests
LukasReschke
committed