weixiyen/jquery-filedrop — pull request #50 by bsorbo (2012-05-15 02:33:45+00:00)
Title: Changes decodeURI to decodeURIComponent for 'data' fields.

This allows the Rails CSRF authenticity_token to be passed through to the header unscathed. Verified fix. 'decodeURI' is intended for use on a full url instead of individual components.

http://stackoverflow.com/questions/747641/what-is-the-difference-between-decodeuricomponent-and-decodeuri