#12156: The csrf_token should be able to use a custom template
-----------------------------------+----------------------------------------
          Reporter:  tolano        |         Owner:  ericholscher        
            Status:  closed        |     Milestone:  1.2                 
         Component:  Contrib apps  |       Version:  SVN                 
        Resolution:  wontfix       |      Keywords:  csrf_token, template
             Stage:  Accepted      |     Has_patch:  0                   
        Needs_docs:  0             |   Needs_tests:  0                   
Needs_better_patch:  0             |  
-----------------------------------+----------------------------------------
Changes (by lukeplant):

  * status:  new => closed
  * resolution:  => wontfix

Comment:

 I think this is one of those cases where guidelines should be broken :-)
 because:

  * We never want the div to be displayed, so it should be invisible
 preferably even the in presence of rules like `form div { margin: 10px; }`
  * We cannot output class=hidden, because this code needs to be stylesheet
 agnostic.

 If you are desperate, then provide your own `{% csrf_token %}` - if you
 load a template library that provides one, it will override the builtin.
 You could also use `template.add_to_builtins`.  The amount of code needed
 is very small.

 Closing WONTFIX for the above reasons - a stylistic problem in some code
 invisible to the user is not a bug :-)

-- 
Ticket URL: <http://code.djangoproject.com/ticket/12156#comment:7>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Reply via email to