index
:
chango.git
devmain
fix-31295
initial-branch
main
stable/5.2.x
stable/6.0.x
django
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
docs
/
ref
/
csrf.txt
Age
Commit message (
Expand
)
Author
2024-06-12
Refs #35401 -- Linked the CsrfViewMiddleware docs to the csrf_protect() decor...
lufafajoshua
2024-05-22
Removed versionadded/changed annotations for 5.0.
Natalia
2024-05-06
Added link to the csrf template tag in the csrf page.
alexgmin
2023-11-23
Fixed #34990 -- Changed link to OWASP in CSRF docs.
Tim Schilling
2023-09-13
Refs #31949 -- Made make_middleware_decorator to work with async functions.
Ben Lomax
2023-07-10
Refs #31949 -- Made @csrf_exempt decorator to work with async functions.
Ben Lomax
2023-03-01
Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.
django-bot
2023-01-17
Removed versionadded/changed annotations for 4.1.
Mariusz Felisiak
2022-12-06
Updated various links to HTTPS and new locations.
Mariusz Felisiak
2022-11-10
Updated documentation and comments for RFC updates.
Nick Pope
2022-05-17
Removed versionadded/changed annotations for 4.0.
Carlton Gibson
2022-03-17
Refs #28592 -- Created a new CSRF how-to document.
tommcn
2022-03-14
Refs #28592 -- Removed redundant spaces in docs/ref/csrf.txt.
Tomas McNamer
2021-11-29
Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret.
Chris Jerdonek
2021-09-21
Fixed broken links and redirects in docs.
Mariusz Felisiak
2021-09-13
Made CSRF JavaScript example more reusable.
sdwoodbury
2021-03-18
Fixed #16010 -- Added Origin header checking to CSRF middleware.
Tim Graham
2020-10-07
Fixed #32065 -- Restored leading dot to CSRF_COOKIE_DOMAIN examples.
Carlton Gibson
2020-06-24
Refs #31493 -- Replaced var with const/let in documentation JS.
Adam Johnson
2020-04-01
Prevented (and corrected) single backtick usage in docs.
Adam Johnson
2020-02-25
Fixed #31291 -- Renamed salt to mask for CSRF tokens.
Ram Rachum
2019-12-12
Rewrote CSRF JavaScript example without jQuery.
Jon Dufresne
2019-12-11
Fixed #31080 -- Removed redundant type="text/javascript" attribute from <scri...
Jon Dufresne
2019-11-27
Fixed #31029 -- Used more specific links to RFCs.
Baptiste Mispelon
2019-09-06
Fixed #30573 -- Rephrased documentation to avoid words that minimise the invo...
Tobias Kunze
2019-03-28
Fixed #30299 -- Removed jQuery dependency from getCookie() in CSRF docs.
Tim Graham
2018-11-15
Used auto-numbered lists in documentation.
François Freitag
2018-10-25
Fixed #29879 -- Added CSRF_COOKIE_HTTPONLY to CSRF AJAX docs.
Mayank Singhal
2018-10-18
Fixed #29858 -- Clarified docs regarding CSRF token header name.
Tim Graham
2018-07-18
Removed duplicate words in docs.
Maxime Lorant
2018-05-12
Alphabetized imports in various docs.
Mariusz Felisiak
2018-05-02
Fixed #29375 -- Removed empty action attribute on HTML forms.
CHI Cheng
2018-04-13
Fixed #27863 -- Added support for the SameSite cookie flag.
Alex Gaynor
2017-09-22
Removed versionadded/changed annotations for 1.11.
Tim Graham
2017-06-22
Refs #16870 -- Doc'd that CSRF protection requires the Referer header.
Flávio Juvenal
2017-05-22
Updated various links in docs to avoid redirects
Claude Paroz
2017-01-20
Refs #16859 -- Updated CSRF FAQ to mention CSRF_USE_SESSIONS setting.
Alasdair Nicol
2017-01-17
Removed versionadded/changed annotations for 1.10.
Tim Graham
2016-11-30
Refs #16859 -- Allowed storing CSRF tokens in sessions.
Raphael Michel
2016-06-28
Used strict comparison in docs/ref/csrf.txt's JavaScript.
Camilo Nova
2016-06-04
Fixed #26628 -- Changed CSRF logger to django.security.csrf.
Holly Becker
2016-06-03
Fixed #26596 -- Added Jinja2 {{ csrf_input }} documentation.
B. J. Potter
2016-06-03
Added syntax highlighting to CSRF example.
B. J. Potter
2016-06-02
Refs #26628 -- Documented CSRF failure logging.
Holly Becker
2016-05-20
Removed versionadded/changed annotations for 1.9.
Tim Graham
2016-05-19
Fixed #20869 -- made CSRF tokens change every request by salt-encrypting them
Shai Berger
2016-05-17
Fixed #26601 -- Improved middleware per DEP 0005.
Florian Apolloner
2016-05-03
Fixed #26567 -- Updated references to obsolete RFC2616.
Vasiliy Faronov
2016-04-05
Fixed #26201 -- Documented the consequences of rotating the CSRF token on login.
Vaclav Ehrlich
2016-03-01
Fixed #26165 -- Added some FAQs about CSRF protection.
acemaster
[next]