Re: Drop CSRF middleware from the settings template

2023-04-20 Thread Florian Apolloner
On Thursday, April 20, 2023 at 1:00:05 PM UTC+2 Jure Erznožnik wrote: OK, I'll bite: For the first issue, my problem revolved around this code: @property def POST(self): # Ensure that request.POST uses our request parsing. if not _hasattr(self, '_data'): self._load_data_and_files() if

Re: Drop CSRF middleware from the settings template

2023-04-20 Thread Jure Erznožnik
OK, I'll bite: For the first issue, my problem revolved around this code: @property def POST(self): # Ensure that request.POST uses our request parsing. if not _hasattr(self, '_data'): self._load_data_and_files() if is_form_media_type(self.content_type): return self._data return

Re: Django's automatic admin interface.

2023-04-20 Thread Dipankar
Thank you all or your comments .. I am happy to hear about wire or htmx @Matthew. I want to do it for myself if I get a little bit clue from you. Thanks a lot. On Wed, Apr 19, 2023 at 7:25 PM Matthew Pava wrote: > I agree with your sentiment, Tom. I would add that we could get a more >

Re: Drop CSRF middleware from the settings template

2023-04-20 Thread Florian Apolloner
Hi, On Tuesday, April 18, 2023 at 10:57:55 PM UTC+2 jure.er...@gmail.com wrote: Well, TBH, I've just completed dealing with CSRF form in my projects. I ended up exempting the particular view from CSRF because I didn't know how to get the stuff to work. The problem was that django parsed the

Re: Production Django use and "real ip"

2023-04-20 Thread 'Adam Johnson' via Django developers (Contributions to Django itself)
> Are there any deployment scenarios where META.REMOTE_ADDR is ever even correct? Yes, when running a WSGI server that faces the internet, with no intermediate proxies. On Wed, Apr 19, 2023 at 3:51 PM Arthur Pemberton wrote: > At this point, I'm not even suggesting that Django handle this