#18359: CSRF dosen't work
------------------------------+--------------------------------------
     Reporter:  jollychang@…  |                    Owner:  nobody
         Type:  Bug           |                   Status:  closed
    Component:  contrib.csrf  |                  Version:  1.4
     Severity:  Normal        |               Resolution:  invalid
     Keywords:                |             Triage Stage:  Unreviewed
    Has patch:  0             |      Needs documentation:  0
  Needs tests:  0             |  Patch needs improvement:  0
Easy pickings:  0             |                    UI/UX:  0
------------------------------+--------------------------------------
Changes (by koenb):

 * status:  new => closed
 * needs_better_patch:   => 0
 * resolution:   => invalid
 * needs_tests:   => 0
 * needs_docs:   => 0


Comment:

 You should read https://docs.djangoproject.com/en/1.4/ref/contrib/csrf
 /#how-to-use-it thoroughly, though the error message states it clearly
 also:

 You are not using RequestContext, so you don't have a proper csrf token in
 the context of your template. Without a proper token, the protection
 obviously fails.

 I am marking this invalid.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/18359#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to