#27396: Docs: send POST request on base.html does not mention {{ csrf_toeken }}
-------------------------------------+-------------------------------------
     Reporter:  Ramin Farajpour      |                    Owner:  nobody
  Cami                               |
         Type:                       |                   Status:  new
  Cleanup/optimization               |
    Component:  Documentation        |                  Version:  1.10
     Severity:  Normal               |               Resolution:
     Keywords:                       |             Triage Stage:
                                     |  Unreviewed
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Changes (by Aymeric Augustin):

 * needs_better_patch:   => 0
 * needs_tests:   => 0
 * needs_docs:   => 0


Comment:

 It's unclear to me how declaring this `<meta>` tag causes the CSRF token
 to be added to AJAX requests.

 Are you using JavaScript code to extract it from there and add it to AJAX
 requests?

 Or is this a behavior of `<meta>` tags that I'm not familiar with?

 If the latter, is it a standardized behavior across browsers? Can you
 provide a like to documentation or compatibility tables?

--
Ticket URL: <https://code.djangoproject.com/ticket/27396#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/065.687ce7050857100663da89047c37fcf6%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to