title: How to handle CSRF in preflighted CORS POST request in django?
body: <p>I am trying to make <code>POST</code> request via AJAX from <code>abc.com</code> to URL from <code>xyz.com</code> (which is a Django application).
  I am getting CSRF token by making a <code>GET</code> request to a URL on <code>xyz.com</code>, but the token changes when an <code>OPTIONS</code> request is made to <code>xyz.com</code> in the preflighted request.</p>
  
  <p>Is there any way to get the response of <code>OPTIONS</code> request in the preflighted request ?</p>
  
  <p><strong>Note:</strong></p>
  
  <p>I am following instructions from following sources :</p>
  
  <ul>
  <li><a href="https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest">https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest</a></li>
  <li><a href="https://developer.mozilla.org/en/docs/HTTP/Access_control_CORS">https://developer.mozilla.org/en/docs/HTTP/Access_control_CORS</a></li>
  <li><a href="http://www.html5rocks.com/en/tutorials/cors/">http://www.html5rocks.com/en/tutorials/cors/</a></li>
  </ul>