disable csrf token for anonymous user #44

Closed
opened 2023-10-09 21:54:47 +02:00 by PlexSheep · 2 comments
Owner

There is no need for anonymous users to have any cookies. Only the admin panel and other parts of the webapp only accessible to admins should use csrf protection.

There is no need for anonymous users to have any cookies. Only the admin panel and other parts of the webapp only accessible to admins should use csrf protection.
PlexSheep added this to the deployment milestone 2023-10-09 21:54:47 +02:00
PlexSheep added the
Task
label 2023-10-09 21:54:47 +02:00
PlexSheep added this to the Gawa project 2023-10-09 21:54:47 +02:00
Author
Owner

Documentation for django csrf: https://docs.djangoproject.com/en/4.2/ref/csrf/

Documentation for django csrf: https://docs.djangoproject.com/en/4.2/ref/csrf/
PlexSheep added the
wontfix
label 2023-10-10 11:32:58 +02:00
Author
Owner

seemingly django does not support this

seemingly django does not support this
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: PlexSheep/gawa#44
No description provided.