Skip to content
Browse files

Fixed #14182 - documented how to modify upload handlers when using Cs…


Thanks to dc for the report.

git-svn-id: bcc190cf-cafb-0310-a4f2-bffc1f526a37
  • Loading branch information...
1 parent e2f55fb commit 89ea98ca5666c0d42b3ab77fcc48f9636dde88f1 @spookylukey spookylukey committed
Showing with 24 additions and 0 deletions.
  1. +24 −0 docs/topics/http/file-uploads.txt
24 docs/topics/http/file-uploads.txt
@@ -270,6 +270,30 @@ list::
Thus, you should always modify uploading handlers as early in your view as
+ Also, ``request.POST`` is accessed by
+ :class:`~django.middleware.csrf.CsrfViewMiddleware` which is enabled by
+ default. This means you will probably need to use
+ :func:`~django.views.decorators.csrf.csrf_exempt` on your view to allow you
+ to change the upload handlers. Assuming you do need CSRF protection, you
+ will then need to use :func:`~django.views.decorators.csrf.csrf_protect` on
+ the function that actually processes the request. Note that this means that
+ the handlers may start receiving the file upload before the CSRF checks have
+ been done. Example code:
+ .. code-block:: python
+ from django.views.decorators.csrf import csrf_exempt, csrf_protect
+ @csrf_exempt
+ def upload_file_view(request):
+ request.upload_handlers.insert(0, ProgressBarUploadHandler())
+ return _upload_file_view(request)
+ @csrf_protect
+ def _upload_file_view(request):
+ ... # Process request
Writing custom upload handlers

0 comments on commit 89ea98c

Please sign in to comment.
Something went wrong with that request. Please try again.