class FooController < ApplicationController

   protect_from_forgery :except => :index  

   # you can disable csrf protection on controller-by-controller basis:

   skip_before_filter :verify_authenticity_token

 end  

# Disable request forgery protection in development environment

  config.action_controller.allow_forgery_protection = false  

<%= javascript_include_tag "jquery.js" %>

<%= javascript_include_tag "jquery.dataTables.js" %>

<script type="text/javascript" charset="utf-8">

            $(document).ready(function() {

                var oTable = $('#example').dataTable( {

                    "bProcessing": true,

                    "bServerSide": true,

                    "sServerMethod": "POST",

                    "sAjaxSource": '/welcome/table_list',

                    "fnServerParams": function ( aoData ) {aoData.push( {

                        "name": "<%= request_forgery_protection_token %>",

                        "value": "<%= form_authenticity_token %>" } );}

                } );

            } );

</script>