diff options
| -rw-r--r-- | docs/ref/contrib/csrf.txt | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index c3c01c0b06..762c517084 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -365,7 +365,8 @@ There may be some views that are unprotected and have been exempted by ``csrf_exempt``, but still need to include the CSRF token. Solution: use :func:`~django.views.decorators.csrf.csrf_exempt` followed by -:func:`~django.views.decorators.csrf.requires_csrf_token`. +:func:`~django.views.decorators.csrf.requires_csrf_token`. (i.e. ``requires_csrf_token`` +should be the innermost decorator). View needs protection for one path ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |