Postgres Pro
Downloads
Home   >   mailing lists

Re: [PATCH] Fix CSRF verification in /admin/mergeorg/ and /admin/purge/ - Mailing list pgsql-www

From Marti Raudsepp
Subject Re: [PATCH] Fix CSRF verification in /admin/mergeorg/ and /admin/purge/
Date
Msg-id CABRT9RCetBTP+SbD2M8PsKE5ejYaVYdXtphBPuceUvF0t2Hp5A@mail.gmail.com
Whole thread Raw
In response to [PATCH] Fix CSRF verification in /admin/mergeorg/ and /admin/purge/  (Marti Raudsepp <marti@juffo.org>)
List pgsql-www
Tree view 
On Wed, Nov 7, 2012 at 10:28 PM, Marti Raudsepp <marti@juffo.org> wrote:
> It's clear now why CSRF didn't work on these pages: the csrf_token
> templatetag requires rendering the template with a RequestContext.

And apologies for breaking the site, this is certainly an omission on
my part in the original patch.

Regards,
Marti

pgsql-www by date:

Previous
From: Marti Raudsepp
Date:
Subject: [PATCH] Fix CSRF verification in /admin/mergeorg/ and /admin/purge/
Next
From: Marti Raudsepp
Date:
Subject: [PATCH] Fix CSRF verification on /api/varnish/purge & misc