I've been using AngularJS with Django, but I have to override the default 
CSRF cookie/header values in AngularJS since only one of the values (the 
cookie name) can be overridden in Django.

This is a humble request to add a setting for the CSRF header name so that 
I can maintain it as my "AngularJS CSRF settings" and I'm sure others would 
like it too.  Changing the cookie and header to XSRF-TOKEN and X-XSRF-TOKEN 
respectively means that CSRF in Angular just works. Nice. With AngularJS's 
popularity on the sharp incline, I see this being quite a useful-to-many 
feature.

I acknowledge that adding a setting is not ideal, so I welcome any ideas 
you may have.
Pull request here: https://github.com/django/django/pull/1958

Thanks,
-Wes

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/django-developers.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/65d2ce93-1d70-4972-b635-e65dcb896c61%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to