django.core.checks.security.csrf

Constant	`W003`	Undocumented
Constant	`W016`	Undocumented
Function	`_csrf_middleware`	Undocumented
Function	`check_csrf_cookie_secure`	Undocumented
Function	`check_csrf_failure_view`	Undocumented
Function	`check_csrf_middleware`	Undocumented

W003 =

Undocumented

Value

Warning('You don\'t appear to be using Django\'s built-in cross-site request for↵
gery protection via the middleware (\'django.middleware.csrf.CsrfViewMiddleware\↵
' is not in your MIDDLEWARE). Enabling the middleware is the safest approach to ↵
ensure you don\'t leave any holes.',
        id='security.W003')

W016 =

Undocumented

Value

Warning('You have \'django.middleware.csrf.CsrfViewMiddleware\' in your MIDDLEWA↵
RE, but you have not set CSRF_COOKIE_SECURE to True. Using a secure-only CSRF co↵
okie makes it more difficult for network traffic sniffers to steal the CSRF toke↵
n.',
        id='security.W016')

def _csrf_middleware():

Undocumented

@register(Tags.security, deploy=True)
def check_csrf_cookie_secure(app_configs, **kwargs):

Undocumented

@register(Tags.security)
def check_csrf_failure_view(app_configs, **kwargs):

Undocumented

@register(Tags.security, deploy=True)
def check_csrf_middleware(app_configs, **kwargs):

Undocumented