New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSRF #16

Open

akx opened this issue May 24, 2017 · 1 comment

Owner

akx commented May 24, 2017 •

edited

Loading

Wondering what might be a good way to deal with CSRF/XSRF.

Prior art, i.e. what DRF does, is to only use Django's CSRF protection when authenticating with methods other than session authentication.

Right now Lepo doesn't even deal with authentication.

Owner Author

akx commented Jul 23, 2017

Perhaps Lepo should check whether the csrf_exempt attribute is present on the handler and decorate the view accordingly.

akx mentioned this issue

CSRF verification failed. Request aborted. #22

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment