Hi,
On Apr 9, 2012, at 11:32 AM, mjl Martin J. Laubach wrote:
> In the corresponding view functions, ensure that the
> 'django.core.context_processors.csrf' context processor is being used.
> Usually, this can be done in one of two ways:
> • Use RequestContext, which always uses
> 'django
>
> However, it seems that the defaults are to add the middleware, but not the
> context processor. Is there a specific reason for this?
>
The docs say:
In the corresponding view functions, ensure that the
'django.core.context_processors.csrf' context processor is being used.
Usually, thi
Hi,
In order to enable CSRF protection, one needs to add the CsrfViewMiddleware to
the middleware classes, and add the CSRF context processor to the context
processors.
However, it seems that the defaults are to add the middleware, but not the
context processor. Is there a specific reason for