summaryrefslogtreecommitdiff
path: root/django/middleware/csrf.py
AgeCommit message (Expand)Author
2014-03-06Fixed #22185 -- Added settings.CSRF_COOKIE_AGERoger Hu
2013-11-03Fixed flake8 E251 violationsMilton Mazzarri
2013-11-02More attacking E302 violatorsAlex Gaynor
2013-11-02Fixed #21324 -- Translate CSRF failure viewBouke Haarsma
2013-10-18Fixed bug causing CSRF token not to rotate on login.Tim Graham
2013-06-19Removed several unused imports.Aymeric Augustin
2013-05-24Rotate CSRF token on loginAndrew Godwin
2013-05-18Fixed #19436 -- Don't log warnings in ensure_csrf_cookie.Olivier Sels
2013-02-07Fixed #15808 -- Added optional HttpOnly flag to the CSRF Cookie.Aymeric Augustin
2013-01-29Fixed typos in docs and commentsTim Graham
2012-09-20Imported getLogger directly from logging moduleClaude Paroz
2012-09-10fixed rfc comment typo in middleware/csrf.pyCollin Anderson
2012-08-13[py3] Made csrf context processor return UnicodeClaude Paroz
2012-02-17Documentation (and some small source code) edits from [17432] - [17537]Adrian Holovaty
2012-02-11Fixes #16827. Adds a length check to CSRF tokens before applying the santizin...Paul McMillan
2012-02-09Fixed #17358 -- Updated logging calls to use official syntax for arguments in...Jannis Leidel
2011-05-09Fixed #15258 - Ajax CSRF protection doesn't apply to PUT or DELETE requestsLuke Plant
2011-05-09Fixed #14134 - ability to set cookie 'path' and 'secure' attributes of CSRF c...Luke Plant
2011-03-30Removed deprecated CsrfResponseMiddleware, and corresponding tests and docsLuke Plant
2011-03-30Removed Django 1.1 fallback for CSRF checks.Luke Plant
2011-03-28Removed a bunch more Python 2.4 workarounds now that we don't support that ve...Adrian Holovaty
2011-03-15Fixed #15617 - CSRF referer checking too strictLuke Plant
2011-02-21Corrected logging call in CSRF middlewareLuke Plant
2011-02-09Fixed a security issue in the CSRF component. Disclosure and new release for...Alex Gaynor
2010-10-28Fixed #14565 - No csrf_token on 404 page.Luke Plant
2010-10-14Fixed #14445 - Use HMAC and constant-time comparison functions where needed.Luke Plant
2010-10-11Fixed #14436 -- Escalated 1.2 PendingDeprecationWarnings to DeprecationWarnin...Russell Keith-Magee
2010-10-06Fixed #14406 -- Added a Python 2.4 compatibility to the logging interface. Th...Russell Keith-Magee
2010-10-04Fixed #12012 -- Added support for logging. Thanks to Vinay Sajip for his draf...Russell Keith-Magee
2010-09-10Fixed #14235 - UnicodeDecodeError in CSRF middlewareLuke Plant
2010-09-09Patch CSRF-protection system to deal with reported security issue. Announceme...James Bennett
2010-09-03Added explanatory note on CSRF failure page for the case of a missing Referer...Luke Plant
2010-06-30Added proper code comments for the HTTPS CSRF protection.Luke Plant
2010-06-08Fixed #13716 - the CSRF get_token function stopped working for views with csr...Luke Plant
2009-10-27Misc clarifications in csrf middleware commentsLuke Plant
2009-10-27Slight change to CSRF error messages to make debugging easier.Luke Plant
2009-10-27Removed unused import.Luke Plant
2009-10-27Moved contrib.csrf.* to core code.Luke Plant
generated by cgit v1.3 (git 2.53.0) at 2026-07-06 19:58:10 +0000