Home | Trees | Indices | Help |
|
---|
|
object --+ | CSRFMiddleware
WSGI filter that validates form tokens
A special hidden variable (_form_token) is used to protect the application against CSRF attacks. All submitted non-GET forms need to contain a valid form token. The form token value is a shared secret only known by the server and the end user.
Instance Methods | |||
|
|||
|
|||
Inherited from |
Properties | |
Inherited from |
Method Details |
|
Home | Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0beta1 on Mon Oct 1 20:58:02 2007 | http://epydoc.sourceforge.net |