#32800: CsrfViewMiddleware unnecessarily masks CSRF cookie
-------------------------------------+-------------------------------------
     Reporter:  Chris Jerdonek       |                    Owner:  Chris
         Type:                       |  Jerdonek
  Cleanup/optimization               |                   Status:  assigned
    Component:  CSRF                 |                  Version:  dev
     Severity:  Normal               |               Resolution:
     Keywords:                       |             Triage Stage:  Accepted
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------

Comment (by Carlton Gibson <carlton@…>):

 In [changeset:"231de683d86374c2b74da2185efc6ddfb5eb3341" 231de68]:
 {{{
 #!CommitTicketReference repository=""
 revision="231de683d86374c2b74da2185efc6ddfb5eb3341"
 Refs #32800 -- Added _add_new_csrf_cookie() helper function.

 This centralizes the logic to use when setting a new cookie. It also
 eliminates the need for the _get_new_csrf_token() function, which is now
 removed.
 }}}

-- 
Ticket URL: <https://code.djangoproject.com/ticket/32800#comment:26>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.d01bced005f6557285af0a4c9d3e780d%40djangoproject.com.

Reply via email to