encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2025-02-02 20:54:42 +03:00
Code Issues Packages Projects Releases Wiki Activity
b187f53453
django-rest-framework/rest_framework
History
Danilo Bargen b187f53453 Changed return status for CSRF failures to HTTP 403 
By default, Django returns "HTTP 403 Forbidden" responses when CSRF
validation failed[1]. CSRF is a case of authorization, not of
authentication. Therefore `PermissionDenied` should be raised instead
of `AuthenticationFailed`.

[1] https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#rejected-requests
2014-09-23 14:16:08 +02:00
..
authtoken Merge branch 'master' into version-3.0 2014-09-19 14:05:50 +01:00
static/rest_framework Made all color declarations in bootstrap-tweaks.css consistent 2014-08-22 10:12:52 +02:00
templates/rest_framework Merge pull request #1829 from cezar77/login-form-errors 2014-09-05 12:59:26 +01:00
templatetags Prefer format and use named blocks 2014-09-04 08:54:50 +02:00
utils First pass on ManyRelation 2014-09-18 14:23:00 +01:00
__init__.py Version 2.4.2 2014-09-03 16:35:17 +01:00
authentication.py Changed return status for CSRF failures to HTTP 403 2014-09-23 14:16:08 +02:00
compat.py More compat fixes 2014-09-22 16:45:06 +01:00
decorators.py Remove unused imports. 2014-08-29 12:54:52 +01:00
exceptions.py More test sorting 2014-09-08 14:24:05 +01:00
fields.py allow_blank, allow_null 2014-09-22 17:46:02 +01:00
filters.py Remove order_by from AutoFilterSet 2014-09-05 11:43:49 -07:00
generics.py Clean up relational fields queryset usage 2014-09-12 10:59:51 +01:00
mixins.py Workin on 2014-09-05 16:29:46 +01:00
models.py Move models.resolve_model to serializers._resolve_model 2014-01-13 11:47:44 -05:00
negotiation.py Code linting and added runtests.py 2014-08-19 13:28:07 +01:00
pagination.py to_internal_value() and to_representation() 2014-09-12 09:49:35 +01:00
parsers.py UNICODE_JSON and COMPACT_JSON settings 2014-09-12 11:38:22 +01:00
permissions.py Deprecate .model in related routers/permissions 2014-08-20 17:15:46 +01:00
relations.py ModelSerializer.create() to handle many to many by default 2014-09-18 14:58:08 +01:00
renderers.py UNICODE_JSON and COMPACT_JSON settings 2014-09-12 11:38:22 +01:00
request.py Resolve linting issues 2014-08-19 13:54:52 +01:00
response.py Drop six from compat. 1.4.2 is now the lowest supported version. 2014-08-19 17:06:55 +01:00
reverse.py Cleanup imports 2013-02-04 20:55:35 +00:00
routers.py Update routers.py 2014-09-17 15:51:17 +01:00
serializers.py Moar tests 2014-09-19 16:43:13 +01:00
settings.py Coerce dates etc to ISO_8601 in seralizer, by default. 2014-09-12 12:10:22 +01:00
status.py Code linting and added runtests.py 2014-08-19 13:28:07 +01:00
test.py Stop the API Client converting empty lists/dicts to empty strings 2014-09-08 12:16:20 +12:00
throttling.py Fix cache_throttle typo 2014-08-20 12:32:24 +01:00
urlpatterns.py Merge branch 'master' into 2.4.0 2013-12-13 16:32:34 +00:00
urls.py Regression for #1810: Test login view renders 2014-09-01 10:07:05 +02:00
views.py NON_FIELD_ERRORS_KEY setting 2014-09-12 10:21:35 +01:00
viewsets.py Fix missing CSRF exemption on viewsets 2014-09-18 10:30:13 -06:00