Re: discrepancy in default CSRF settings

2012-04-09 Thread Erik Romijn
Hi, On Apr 9, 2012, at 11:32 AM, mjl Martin J. Laubach wrote: > In the corresponding view functions, ensure that the > 'django.core.context_processors.csrf' context processor is being used. > Usually, this can be done in one of two ways: > • Use RequestContext, which always uses > 'django

Re: discrepancy in default CSRF settings

2012-04-09 Thread mjl Martin J. Laubach
> > However, it seems that the defaults are to add the middleware, but not the > context processor. Is there a specific reason for this? > The docs say: In the corresponding view functions, ensure that the 'django.core.context_processors.csrf' context processor is being used. Usually, thi

discrepancy in default CSRF settings

2012-04-09 Thread Erik Romijn
Hi, In order to enable CSRF protection, one needs to add the CsrfViewMiddleware to the middleware classes, and add the CSRF context processor to the context processors. However, it seems that the defaults are to add the middleware, but not the context processor. Is there a specific reason for