Re: csrf protection question

2012-10-23 Thread Russell Keith-Magee
… and, I've just noticed that you cross posted this to django-users *and* django-developers, which is also a no-no. Please choose the single appropriate mailing list and post your message once. In this case it sounds like django-users was the right place. Yours, Russ Magee %-) On Wed, Oct 24, 201

Re: csrf protection question

2012-10-23 Thread Russell Keith-Magee
Hi Àlex Django-developers is a mailing list for discussing the development of Django itself. If you have a general usage question, please direct it to django-users. Alternatively, if this was intended as a suggestion for something we should do to Django's CSRF middleware -- you'll need to explain

csrf protection question

2012-10-23 Thread Àlex Pérez
I have override the CsrfViewMiddleware middleware by: class CustomCsrfViewMiddleware(CsrfViewMiddleware): def process_response(self, request, response): if getattr(response, 'csrf_processing_done', False): return response # If CSRF_COOKIE is unset, then CsrfViewM