Re: [pylons-discuss] Problem between Pyramid's CSRF protection and Deform

2021-04-28 Thread Laurent Daverio
Hi Mikko, thank you for your reply :) I don't think I'm doing anything weird there. The problem happens in a class-based view. I can see the 'csrf_token' cookie qith the right value, I can display the same value inside a template by calling get_csrf_token(), but the value generated inside the

Re: [pylons-discuss] Problem between Pyramid's CSRF protection and Deform

2021-04-28 Thread Laurent Daverio
Thank you Steve. I'll have to think about it, not that the code is secret, just a matter of knowing what to post to be relevant. Le mer. 28 avr. 2021 à 22:10, Steve Piercy a écrit : > > It's difficult to say without your example. I've been using CSRF as shown in > the Deform demo without any

Re: [pylons-discuss] Problem between Pyramid's CSRF protection and Deform

2021-04-28 Thread Steve Piercy
It's difficult to say without your example. I've been using CSRF as shown in the Deform demo without any issues. --steve On 4/28/21 10:32 AM, Laurent Daverio wrote: > Hello List, > > I'd like to report a problem I've just encountered, occurring betwen > Pyramid's CSRF protection and Deform.

Re: [pylons-discuss] Problem between Pyramid's CSRF protection and Deform

2021-04-28 Thread Mikko Ohtamaa
Hi Laurent, > > The Deform Demo > (https://deformdemo.pylonsproject.org/pyramid_csrf_demo/) shows how to > use a deferred value to create hidden field "csrf_token" in the > generated forms > > > But there's a problem: the token generated that way doesn't have the > same value as when I

[pylons-discuss] Problem between Pyramid's CSRF protection and Deform

2021-04-28 Thread Laurent Daverio
Hello List, I'd like to report a problem I've just encountered, occurring betwen Pyramid's CSRF protection and Deform. Basically, I have a Pyramid 2.0 web app configured along the lines of the "URL dispatch wiki tutorial"