django-session-csrf-cookie Django middleware that works with session-csrf and sends a CSRF token cookie
Download

django-session-csrf-cookie Ranking & Summary

django-session-csrf-cookie Tags

Django token CSRF

django-session-csrf-cookie Description

django-session-csrf-cookie is Django app that provides a CSRF token cookie when using django-session-csrf. By design, django-session-csrf does not require a CSRF token cookie, but such a cookie is useful for AJAX requests and other web APIs, since it allows the client to get the CSRF token without parsing HTML. (Note that the cookie is not used by the server for any purpose, so the security hole django-session-csrf was designed to fix is still fixed.)InstallationFrom PyPI:pip install django-session-csrf-cookieFrom github:git clone git://github.com/trustcentric/django-session-csrf-cookie.gitAdd session_csrf_cookie.CsrfCookieMiddleware to your MIDDLEWARE_CLASSES below session_csrf.CsrfMiddleware:MIDDLEWARE_CLASSES = ( ... 'session_csrf.CsrfMiddleware', 'session_csrf_cookie.CsrfCookieMiddleware', ...)Add session_csrf_cookie to INSTALLED_APPS.Settingssession-csrf-cookie-middleware can be controlled using the following settings: CSRF_COOKIE_NAME The name used for the CSRF token cookie. Default: csrftoken CSRF_COOKIE_DOMAIN The domain to be used when setting the CSRF cookie. Default: None CSRF_COOKIE_SECURE Whether to use a secure cookie for the CSRF cookie. Default: False CSRF_COOKIE_HTTPONLY Whether to set the HTTPOnly flag on the CSRF cookie. Default: FalseProduct's homepage

django-session-csrf-cookie Related Software