encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2024-11-26 19:43:59 +03:00
Code Issues Packages Projects Releases Wiki Activity
09d70958bd
django-rest-framework/docs/topics/csrf.md
Marko Tibold 71a93930fd Fixing spelling errors.
2012-10-21 16:34:07 +02:00

615 B
Raw Blame History

Working with AJAX and CSRF

"Take a close look at possible CSRF / XSRF vulnerabilities on your own websites. They're the worst kind of vulnerability -- very easy to exploit by attackers, yet not so intuitively easy to understand for software developers, at least until you've been bitten by one."

— Jeff Atwood

  • Explain need to add CSRF token to AJAX requests.
  • Explain deferred CSRF style used by REST framework
  • Why you should use Django's standard login/logout views, and not REST framework view