| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-03-01 | Fixed #26165 -- Added some FAQs about CSRF protection. | acemaster | |
| Thanks Florian Apolloner and Shai Berger for review. | |||
| 2016-02-09 | Fixed #26181 -- Corrected AngularJS CSRF example. | userimack | |
| 2016-01-21 | Changed `action="."` to `action=""` in tests and docs. | Luke Plant | |
| `action="."` strips query parameters from the URL which is not usually what you want. Copy-paste coding of these examples could lead to difficult to track down bugs or even data loss if the query parameter was meant to alter the scope of a form's POST request. | |||
| 2016-01-15 | Added docs about configuring CSRF support in AngularJS. | Danilo Bargen | |
| 2015-12-23 | Fixed #25969 -- Replaced render_to_response() with render() in docs examples. | Tim Graham | |
| 2015-12-01 | Fixed #25778 -- Updated docs links to use https when available. | Jon Dufresne | |
| 2015-11-16 | Fixed #25755 -- Unified spelling of "website". | Agnieszka Lasyk | |
| 2015-09-16 | Fixed #24496 -- Added CSRF Referer checking against CSRF_COOKIE_DOMAIN. | Matt Robenolt | |
| Thanks Seth Gottlieb for help with the documentation and Carl Meyer and Joshua Kehn for reviews. | |||
| 2015-09-05 | Fixed #25334 -- Provided a way to allow cross-origin unsafe requests over HTTPS. | Joshua Kehn | |
| Added the CSRF_TRUSTED_ORIGINS setting which contains a list of other domains that are included during the CSRF Referer header verification for secure (HTTPS) requests. | |||
| 2015-08-19 | Recommended the JavaScript Cookie library instead of jQuery cookie. | Marc | |
| jQuery cookie is no longer maintained in favor of the JavaScript cookie library. This also removes the jQuery dependency. | |||
| 2015-05-01 | Updated capitalization in the word "JavaScript" for consistency | Dave Hodder | |
| 2015-03-05 | Fixed #21495 -- Added settings.CSRF_HEADER_NAME | Grzegorz Slusarek | |
| 2014-12-28 | Deprecated TEMPLATE_CONTEXT_PROCESSORS. | Aymeric Augustin | |
| 2014-12-28 | Moved context_processors from django.core to django.template. | Aymeric Augustin | |
| 2014-11-15 | Fixed #23825 -- Added links for decorating class-based views to the CSRF docs. | Fabio Natali | |
| 2014-11-03 | Moved CSRF docs out of contrib. | Thomas Chaumeny | |
 |
index : chango.git | |
| django |
| summaryrefslogtreecommitdiff |