rails/jquery-rails — pull request #123 by christianv (2013-04-12 15:29:30+00:00)
Title: Don't set the CSRFProtection on GET requests

From the [Rails Security Guide](http://guides.rubyonrails.org/security.html) on CSRF:

> There are many other possibilities, including Ajax to attack the victim in the background. The solution to this is including a security token in **non-GET requests** which check on the server-side.