测试gitnore
This commit is contained in:
@@ -97,7 +97,7 @@ CSRF_FAILURE_TEMPLATE = """
|
||||
{% endif %}
|
||||
</body>
|
||||
</html>
|
||||
""" # NOQA
|
||||
"""
|
||||
CSRF_FAILURE_TEMPLATE_NAME = "403_csrf.html"
|
||||
|
||||
|
||||
@@ -106,46 +106,40 @@ def csrf_failure(request, reason="", template_name=CSRF_FAILURE_TEMPLATE_NAME):
|
||||
Default view used when request fails CSRF protection
|
||||
"""
|
||||
from django.middleware.csrf import REASON_NO_CSRF_COOKIE, REASON_NO_REFERER
|
||||
|
||||
c = {
|
||||
"title": _("Forbidden"),
|
||||
"main": _("CSRF verification failed. Request aborted."),
|
||||
"reason": reason,
|
||||
"no_referer": reason == REASON_NO_REFERER,
|
||||
"no_referer1": _(
|
||||
"You are seeing this message because this HTTPS site requires a "
|
||||
"“Referer header” to be sent by your web browser, but none was "
|
||||
"sent. This header is required for security reasons, to ensure "
|
||||
"that your browser is not being hijacked by third parties."
|
||||
),
|
||||
"no_referer2": _(
|
||||
"If you have configured your browser to disable “Referer” headers, "
|
||||
"please re-enable them, at least for this site, or for HTTPS "
|
||||
"connections, or for “same-origin” requests."
|
||||
),
|
||||
"no_referer3": _(
|
||||
'title': _("Forbidden"),
|
||||
'main': _("CSRF verification failed. Request aborted."),
|
||||
'reason': reason,
|
||||
'no_referer': reason == REASON_NO_REFERER,
|
||||
'no_referer1': _(
|
||||
'You are seeing this message because this HTTPS site requires a '
|
||||
'“Referer header” to be sent by your Web browser, but none was '
|
||||
'sent. This header is required for security reasons, to ensure '
|
||||
'that your browser is not being hijacked by third parties.'),
|
||||
'no_referer2': _(
|
||||
'If you have configured your browser to disable “Referer” headers, '
|
||||
'please re-enable them, at least for this site, or for HTTPS '
|
||||
'connections, or for “same-origin” requests.'),
|
||||
'no_referer3': _(
|
||||
'If you are using the <meta name="referrer" '
|
||||
'content="no-referrer"> tag or including the “Referrer-Policy: '
|
||||
"no-referrer” header, please remove them. The CSRF protection "
|
||||
"requires the “Referer” header to do strict referer checking. If "
|
||||
"you’re concerned about privacy, use alternatives like "
|
||||
'<a rel="noreferrer" …> for links to third-party sites.'
|
||||
),
|
||||
"no_cookie": reason == REASON_NO_CSRF_COOKIE,
|
||||
"no_cookie1": _(
|
||||
'content=\"no-referrer\"> tag or including the “Referrer-Policy: '
|
||||
'no-referrer” header, please remove them. The CSRF protection '
|
||||
'requires the “Referer” header to do strict referer checking. If '
|
||||
'you’re concerned about privacy, use alternatives like '
|
||||
'<a rel=\"noreferrer\" …> for links to third-party sites.'),
|
||||
'no_cookie': reason == REASON_NO_CSRF_COOKIE,
|
||||
'no_cookie1': _(
|
||||
"You are seeing this message because this site requires a CSRF "
|
||||
"cookie when submitting forms. This cookie is required for "
|
||||
"security reasons, to ensure that your browser is not being "
|
||||
"hijacked by third parties."
|
||||
),
|
||||
"no_cookie2": _(
|
||||
"If you have configured your browser to disable cookies, please "
|
||||
"re-enable them, at least for this site, or for “same-origin” "
|
||||
"requests."
|
||||
),
|
||||
"DEBUG": settings.DEBUG,
|
||||
"docs_version": get_docs_version(),
|
||||
"more": _("More information is available with DEBUG=True."),
|
||||
"hijacked by third parties."),
|
||||
'no_cookie2': _(
|
||||
'If you have configured your browser to disable cookies, please '
|
||||
're-enable them, at least for this site, or for “same-origin” '
|
||||
'requests.'),
|
||||
'DEBUG': settings.DEBUG,
|
||||
'docs_version': get_docs_version(),
|
||||
'more': _("More information is available with DEBUG=True."),
|
||||
}
|
||||
try:
|
||||
t = loader.get_template(template_name)
|
||||
@@ -157,4 +151,4 @@ def csrf_failure(request, reason="", template_name=CSRF_FAILURE_TEMPLATE_NAME):
|
||||
else:
|
||||
# Raise if a developer-specified template doesn't exist.
|
||||
raise
|
||||
return HttpResponseForbidden(t.render(c), content_type="text/html")
|
||||
return HttpResponseForbidden(t.render(c), content_type='text/html')
|
||||
|
||||
Reference in New Issue
Block a user