After two years, made a PR for this during PyCon sprints: https://github.com/django/django/pull/8546 🍾 Em sábado, 5 de dezembro de 2015 04:31:12 UTC-8, Collin Anderson escreveu: > > Basically, the origin check would only be useful for safari (in this > case). Everywhere else we'd still need to rely on the referrer header. > > On Sat, Dec 5, 2015 at 3:42 AM, Florian Apolloner <f.apo...@gmail.com > <javascript:>> wrote: > >> >> >> On Friday, December 4, 2015 at 8:03:45 PM UTC+1, Flávio Junior wrote: >>> >>> I can create a ticket suggesting Django to check Origin header before >>> checking Referer. Or do you want to create that Collin? >>> >> >> I think Firxfox does not send the origin header ever yet, do you have any >> docs on that (Aside from CORS with Ajax from the looks of it) >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Django developers (Contributions to Django itself)" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to django-develop...@googlegroups.com <javascript:>. >> To post to this group, send email to django-d...@googlegroups.com >> <javascript:>. >> Visit this group at http://groups.google.com/group/django-developers. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/django-developers/1cb9d411-8247-4e93-8120-5d043869c001%40googlegroups.com >> >> <https://groups.google.com/d/msgid/django-developers/1cb9d411-8247-4e93-8120-5d043869c001%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> >> For more options, visit https://groups.google.com/d/optout. >> > >
-- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To post to this group, send email to django-developers@googlegroups.com. Visit this group at https://groups.google.com/group/django-developers. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/f4046f53-3802-41eb-a903-60e5dcc8809f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
