Simon Meers
|
5ecb88c146
Fixed #16014 -- numerous documentation typos -- thanks psmith.
|
14 år sedan |
Luke Plant
|
396bc58889
Updated AJAX example code in CSRF docs to be consistent regarding what are safe HTTP methods
|
14 år sedan |
Luke Plant
|
cb060f0f34
Fixed #15258 - Ajax CSRF protection doesn't apply to PUT or DELETE requests
|
14 år sedan |
Luke Plant
|
8cbcf1d3a6
Fixed #14134 - ability to set cookie 'path' and 'secure' attributes of CSRF cookie
|
14 år sedan |
Luke Plant
|
a75120927e
Added 'settings' section to CSRF docs, eliminating the unneeded 'Subdomains' section
|
14 år sedan |
Luke Plant
|
d3641d889b
Clarified wording about use of 2 decorators in CSRF docs
|
14 år sedan |
Luke Plant
|
bf7af2be15
Added clarifying note to docs for CSRF_COOKIE_DOMAIN
|
14 år sedan |
Luke Plant
|
b6c5f8060d
Fixed #15354 - provide method to ensure CSRF token is always available for AJAX requests
|
14 år sedan |
Luke Plant
|
e9342e9b32
Fixed #15469 - CSRF token is inserted on GET requests
|
14 år sedan |
Luke Plant
|
7c648ea4aa
Mentioned simplification of AJAX example code in CSRF docs.
|
14 år sedan |
Luke Plant
|
5df93d529d
Documented the edge case of needing a view that is partly CSRF protected
|
14 år sedan |
Luke Plant
|
b5da093fa9
In CSRF docs, moved 'Exceptions' section to 'Edge cases', and cleaned up some associated markup
|
14 år sedan |
Luke Plant
|
eadcbcb131
Fixed #15518 - documented requires_csrf_token
|
14 år sedan |
Luke Plant
|
1d350a6c51
Changed an example in CSRF docs to use new 'render' shortcut
|
14 år sedan |
Luke Plant
|
ae1866ddef
Fixed #15869 - example AJAX code in CSRF docs fails sometimes for IE7 or absolute same origin URLs
|
14 år sedan |
Luke Plant
|
96520e87bd
Corrected factual error regarding logging in the CSRF docs
|
14 år sedan |
Luke Plant
|
8823021625
Removed deprecated CsrfResponseMiddleware, and corresponding tests and docs
|
14 år sedan |
Luke Plant
|
37343bac8a
Removed example CSRF jQuery code from release notes, replacing with link to improved code in the CSRF docs
|
14 år sedan |
Luke Plant
|
d068a04244
Fixed #15284 - improved example jQuery code for adding X-CSRF-Token
|
14 år sedan |
Alex Gaynor
|
208630aa4b
Fixed a security issue in the CSRF component. Disclosure and new release forthcoming.
|
14 år sedan |
Timo Graham
|
2ea93f9327
Fixed #14000 - remove versionadded/changed tags for Django 1.0 and 1.1
|
14 år sedan |
Russell Keith-Magee
|
8ce4a1991a
Fixed #14116 -- Added a flag to enable CSRF checks in the test client. Thanks to jon@licq.org for the suggestion.
|
14 år sedan |
Jacob Kaplan-Moss
|
728effcfbd
Fixed #14141: docs now use the :doc: construct for links between documents.
|
14 år sedan |
Luke Plant
|
9f592ecced
Fixed #12964 - wrong path for CSRF decorators in upgrading notes.
|
15 år sedan |
Luke Plant
|
be57541af1
Fixed #12839 - noted change of import path for csrf_exempt decorator
|
15 år sedan |
Luke Plant
|
48edb177ed
Fixed #12053 - form examples don't validate according to w3c
|
15 år sedan |
Luke Plant
|
20c7e646ff
Added notes to "Features deprecated in 1.2" about CSRF and SMTPConnection
|
15 år sedan |
Russell Keith-Magee
|
cf169d9e12
Cleaned up the release notes index page, and added some stub 1.1.2 and 1.2 release notes.
|
15 år sedan |
Luke Plant
|
53b2c3867b
Fixed #12130 - documented need for csrf_protect on views that don't accept POST
|
15 år sedan |
Luke Plant
|
5a0aab41ee
Allow CsrfResponseMiddleware to be used if templates cannot be updated.
|
15 år sedan |