From 147c331c3b9adc8f34e32953dde7488e136ad0dd Mon Sep 17 00:00:00 2001 From: Luke McCarthy Date: Fri, 7 Jul 2017 22:26:13 -0700 Subject: [PATCH] Fix issue #5258 Sanitize serializer.data to remove hidden fields before rendering template JSON instance to raw data form. --- rest_framework/renderers.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/rest_framework/renderers.py b/rest_framework/renderers.py index 406dda72c..ef6a8c1e4 100644 --- a/rest_framework/renderers.py +++ b/rest_framework/renderers.py @@ -556,7 +556,10 @@ class BrowsableAPIRenderer(BaseRenderer): accepted = self.accepted_media_type context = self.renderer_context.copy() context['indent'] = 4 - content = renderer.render(serializer.data, accepted, context) + data = {k:v for (k,v) in serializer.data.items() + if not isinstance(serializer.fields[k], + serializers.HiddenField)} + content = renderer.render(data, accepted, context) else: content = None