      // or any other URL that isn't scheme relative or absolute i.e relative.
      !(/^(\/\/|http:|https:).*/.test(url));
  }
  
  var csrftoken = getCookie(window.drf.csrfCookieName);
  
  $.ajaxSetup({
    beforeSend: function(xhr, settings) {
      if (!csrfSafeMethod(settings.type) && sameOrigin(settings.url)) {
        // Send the token to same-origin, relative URLs only.
 
</s> remove     render({}, 'rest_framework/base.html')
 </s> add     result = render({}, 'rest_framework/base.html')
    # note that this response will not include a valid CSRF token
    assert re.search(r'\bcsrfToken: ""', result.content.decode('utf-8'))
var csrftoken = window.drf.csrfToken;
      // or any other URL that isn't scheme relative or absolute i.e relative.
      !(/^(\/\/|http:|https:).*/.test(url));
  }
  
var csrftoken = window.drf.csrfToken;
  
  $.ajaxSetup({
    beforeSend: function(xhr, settings) {
      if (!csrfSafeMethod(settings.type) && sameOrigin(settings.url)) {
        // Send the token to same-origin, relative URLs only.
keep keep keep keep replace keep keep keep keep keep
 Made templates compatible with session-based CSRF. (#6207) 
rest_framework/static/rest_framework/js/csrf.js