我怎样才能找到谁负责 Django 的 CSRF 中间件?
我怎样才能找到谁负责 Django 的 CSRF 中间件,以便我可以向他们提问?
几个月来,我的 Django 网站上出现了很多 CSRF 失败,每隔几周就会让我花费数小时的时间来解决问题。我想联系参与该项目的开发人员,向他们询问一两个有关我遇到的问题的根本问题。
我发布了其他几篇关于这些问题的帖子,这些问题从未得到满意的答案,但确实产生了一些解决方法:
Django CSRF 框架无法禁用,并且正在破坏我的网站
Django CSRF 框架出现许多故障
来自 Django 的 CSRF 中间件的大量误报?
对于 Django 的CSRF 失败中间件,如何获取 CSRF 错误来报告哪个 URL 失败?
其他一些人也有同样类型的挫败感: 在 SVN Trunk 中完全禁用 Django 的 CSRF 保护
How can I find out who is responsible for Django's CSRF middleware so I could ask them questions?
I'm having so many CSRF failures for months on my Django site and it is costing me hours and hours of problems every few weeks. I want to contact the developers who worked on it to ask them one or two root questions about the problems I'm having.
I put up several other posts about the problems that never get satisfactory answers, but that do result in a few work arounds:
Django CSRF framework cannot be disabled and is breaking my site
Django CSRF Framework having many failures
Tons of false positives from Django's CSRF middleware?
For Django's CSRF failure middleware, how can you get the CSRF errors to report what URL is failing?
Some other people are having the same types of frustrations:
Completely disable Django's CSRF protection in SVN Trunk
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
Django 1.2 正在重新设计 CSRF 保护。请参阅社区 wiki 页面 CsrfProtection,其中讨论了当前的限制和重新设计的建议。就我个人而言,我正在考虑继续使用 Simon Willison 的 django-safeform 项目作为临时解决方案,直到1.2 发布。
CSRF protection is being re-worked for Django 1.2. See the community wiki page CsrfProtection that discusses the current limitations and proposals for re-working. Personally I'm thinking about moving ahead and using Simon Willison's django-safeform project as a temporary solution until 1.2 is released.
我之前已经说过这一点,但是您不应该在生产项目中使用 trunk。使用稳定版本,你不会有任何问题。
I've said this before, but you should not be using trunk for production projects. Use the stable release, and you won't have any problems.