summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJannis Leidel <jannis@leidel.info>2010-12-13 13:57:54 +0000
committerJannis Leidel <jannis@leidel.info>2010-12-13 13:57:54 +0000
commit4803410721db629a35390eb415e8c3fe86314f30 (patch)
tree1e2e6e94d7f4bcf90cbd3a6b76732284a8d9a06b
parent33a6201fdf6d3334dbafcafa117959a8e3af91d6 (diff)
[1.2.X] Fixed #14446 -- Prevented the password reset confirmation view to be cached. Thanks, Paul and Gabriel.
Backport from trunk (r14890). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@14909 bcc190cf-cafb-0310-a4f2-bffc1f526a37
-rw-r--r--django/contrib/auth/views.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/django/contrib/auth/views.py b/django/contrib/auth/views.py
index 6f75873fe0..75468b9e68 100644
--- a/django/contrib/auth/views.py
+++ b/django/contrib/auth/views.py
@@ -129,7 +129,7 @@ def password_reset(request, is_admin_site=False, template_name='registration/pas
def password_reset_done(request, template_name='registration/password_reset_done.html'):
return render_to_response(template_name, context_instance=RequestContext(request))
-# Doesn't need csrf_protect since no-one can guess the URL
+@never_cache
def password_reset_confirm(request, uidb36=None, token=None, template_name='registration/password_reset_confirm.html',
token_generator=default_token_generator, set_password_form=SetPasswordForm,
post_reset_redirect=None):