It turns out I needed to set the HTTP Referer header to the login page
url in the request where I post the login information.
req.add_header( 'Referer', login_url )
The reason is explained on the Django CSRF documentation -
specifically, step 4.
Due to our somewhat peculiar server setup where we
Hi, everyone. I've searched the group site and couldn't find anything
with this specific problem. If I missed a good discussion on this, let
me know. The following is my problem:
I'm working on a django/mod_wsgi/apache2 website that serves sensitive
information using https for all requests and res
2 matches
Mail list logo