Default CSRF validation with django

Question

Default CSRF validation with django

tiagob opened this issue 12 years ago · comments

Tiago commented 12 years ago

In heavy_data.js your overriding the cookie which is used for CSRF in django forms.

Form submission fails with:
Forbidden (403)
CSRF verification failed. Request aborted.

Reason given for failure:
CSRF cookie not set.

AppleGrew · Answer 1 · Fri Jan 11 2013 12:00:43 GMT+0800 (China Standard Time)

Can you please provide more details? I did not see this problem before.

Tiago · Answer 2 · Sat Jan 12 2013 03:28:12 GMT+0800 (China Standard Time)

I have 188 selected values. I'm using google chrome. It seems that my document.cookie can only take 75 of them before it starts replacing the ones it just set and the csrf token too in setCookie in heavy_data.js.

Tiago · Answer 3 · Sat Jan 12 2013 05:24:22 GMT+0800 (China Standard Time)

I got it working by replacing the cookie code in heavy_data.js with https://github.com/marcuswestin/store.js

AppleGrew · Answer 4 · Sat Jan 12 2013 10:34:08 GMT+0800 (China Standard Time)

Oops. Good catch! Yes there is usually a max limit of 4KB limit on cookies. In your case you are hitting that at 75 elements. I will incorporate your suggestion in heavy_data.js.

AppleGrew · Answer 5 · Mon Jan 14 2013 02:13:59 GMT+0800 (China Standard Time)

Please update to latest version. Noe django_select2 does not use cookies or localStorage at all.