Decorated views with sensitive_post_parameters

misago/users/views/api.py

@@ -1,6 +1,7 @@
 from django.core.exceptions import ValidationError
 from django.http import JsonResponse
 from django.utils.translation import ugettext as _
+from django.views.decorators.debug import sensitive_post_parameters
 
 from misago.core.decorators import ajax_only, require_POST
 
@@ -8,6 +9,7 @@ from misago.users import validators
 
 
 def api(f):
+    @sensitive_post_parameters
     @ajax_only
     @require_POST
     def decorator(request, *args, **kwargs):

misago/users/views/register.py

@@ -1,4 +1,5 @@
 from django.shortcuts import redirect, render
+from django.views.decorators.debug import sensitive_post_parameters
 
 from misago.conf import settings
 from misago.users.decorators import deny_authenticated, deny_banned_ips
@@ -14,6 +15,7 @@ def register_decorator(f):
     return decorator
 
 
+@sensitive_post_parameters
 @deny_authenticated
 @deny_banned_ips
 @register_decorator