@anonymous_csrf for /users/pwreset (bug 652973)

mozilla · Apr 26, 2011 · 8c5ffde · 8c5ffde
1 parent 0d34c59
commit 8c5ffde
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/apps/users/urls.py b/apps/users/urls.py
@@ -2,6 +2,7 @@
 from django.conf.urls.defaults import patterns, url, include
 
 from zadmin import jinja_for_django
+from session_csrf import anonymous_csrf
 
 from . import forms, views
 from .models import UserProfile
@@ -31,7 +32,7 @@
     url('^login', views.login, name='users.login'),
     url('^logout', views.logout, name='users.logout'),
     url('^register$', views.register, name='users.register'),
-    url(r'^pwreset/?$', auth_views.password_reset,
+    url(r'^pwreset/?$', anonymous_csrf(auth_views.password_reset),
                         {'template_name': 'users/pwreset_request.html',
                          'email_template_name': 'users/email/pwreset.ltxt',
                          'password_reset_form': forms.PasswordResetForm,