Keegan McAllister 6f2bbe5917 Set and check csrf_token for #reload ...

Fixes a message forgery bug (#335).

This works because Django will not generate a new CSRF token if a valid token
cookie is already present (see django/middleware/csrf.py).

(imported from commit 23222cb0bb62ae8a2f8ac7fb3f24bbc866103454)

2012-11-14 13:35:24 -05:00

4.5 KiB

Raw Blame History

View Raw