|
@@ -569,6 +569,9 @@ Adds protection against Cross Site Request Forgeries by adding hidden form
|
|
|
fields to POST forms and checking requests for the correct value. See the
|
|
|
:doc:`Cross Site Request Forgery protection documentation </ref/csrf>`.
|
|
|
|
|
|
+You can add Cross Site Request Forgery protection to individual views using the
|
|
|
+:func:`~django.views.decorators.csrf.csrf_protect()` decorator.
|
|
|
+
|
|
|
``X-Frame-Options`` middleware
|
|
|
------------------------------
|
|
|
|