From e8eea8404e16ed5d4bc8e272470eda68f38c8ce7 Mon Sep 17 00:00:00 2001
From: Uncled1023 <admin@teknik.io>
Date: Wed, 26 Oct 2016 17:44:51 -0700
Subject: [PATCH] Added X-Requested-With header to ajax calls.

---
 Teknik/Scripts/Common.js | 2 ++
 Teknik/Web.config        | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Teknik/Scripts/Common.js b/Teknik/Scripts/Common.js
index 7a30a88..edc2e7e 100644
--- a/Teknik/Scripts/Common.js
+++ b/Teknik/Scripts/Common.js
@@ -15,6 +15,7 @@
             type: "POST",
             url: form.attr('action'),
             data: form.serialize(),
+            headers: {'X-Requested-With': 'XMLHttpRequest'},
             xhrFields: {
                 withCredentials: true
             },
@@ -45,6 +46,7 @@
             type: "POST",
             url: form.attr('action'),
             data: form.serialize(),
+            headers: {'X-Requested-With': 'XMLHttpRequest'},
             xhrFields: {
                 withCredentials: true
             },
diff --git a/Teknik/Web.config b/Teknik/Web.config
index cad8ab8..f5fbf46 100644
--- a/Teknik/Web.config
+++ b/Teknik/Web.config
@@ -64,7 +64,7 @@
       <customHeaders>
         <add name="Access-Control-Allow-Credentials" value="true" />
         <add name="Access-Control-Allow-Methods" value="GET, PUT, POST, DELETE, OPTIONS" />
-        <add name="Access-Control-Allow-Headers" value="Accept, Content-Type" />
+        <add name="Access-Control-Allow-Headers" value="Accept, Content-Type, X-Requested-With" />
         <add name="strict-transport-security" value="max-age=31536000; includeSubdomains" />
       </customHeaders>
     </httpProtocol>