python-Django Forbidden (403) CSRF verification failed. Request aborted.

来源:互联网 发布:天猫淘宝商城男装 编辑:程序博客网 时间:2024/06/06 00:13

问题:python-Django 调试时页面遇到 Forbidden (403) CSRF verification failed. Request aborted.


Forbidden (403)CSRF verification failed. Request aborted.HelpReason given for failure:    CSRF token missing or incorrect.    In general, this can occur when there is a genuine Cross Site Request Forgery, or when Django's CSRF mechanism has not been used correctly. For POST forms, you need to ensure:Your browser is accepting cookies.The view function passes a request to the template's render method.In the template, there is a {% csrf_token %} template tag inside each POST form that targets an internal URL.If you are not using CsrfViewMiddleware, then you must use csrf_protect on any views that use the csrf_token template tag, as well as those that accept the POST data.The form has a valid CSRF token. After logging in in another browser tab or hitting the back button after a login, you may need to reload the page with the form, because the token is rotated after a login.You're seeing the help section of this page because you have DEBUG = True in your Django settings file. Change that to False, and only the initial error message will be displayed.You can customize this page using the CSRF_FAILURE_VIEW setting.

处理:在提交的表单form中添加 {%csrf_token%}


阅读全文
0 0
原创粉丝点击