diff options
| author | Piper Merriam | 2014-07-25 12:09:07 -0600 | 
|---|---|---|
| committer | Piper Merriam | 2014-09-03 09:50:31 -0600 | 
| commit | fc9be55d436dbdd4a667d331348cfb5f421c4c91 (patch) | |
| tree | f439fa0d62639f44e560eeb59c87505535eb46dd /README.md | |
| parent | f08afe162cb1d0a589674ca26dc6184c7b3d185c (diff) | |
| download | django-rest-framework-fc9be55d436dbdd4a667d331348cfb5f421c4c91.tar.bz2 | |
Alter CSRF exemption implementation
The previous implementation of decorating `APIView.dispach` with the
`csrf_exempt` decorator allowed for an easy-to-make mistake where
someone could override the `dispatch` method on a view and inadvertantly
remove the csrf exemption of their api view.
By moving the decoration of the view into the `as_view` logic, it
becomes much more difficult to make this mistake.
Diffstat (limited to 'README.md')
0 files changed, 0 insertions, 0 deletions
