middleware.py 494 B

12345678910111213
  1. from misago.csrf import CSRFProtection
  2. from misago.utils import get_random_string
  3. class CSRFMiddleware(object):
  4. def process_request(self, request):
  5. if request.user.is_crawler():
  6. return None
  7. if 'csrf_token' in request.session:
  8. csrf_token = request.session['csrf_token']
  9. else:
  10. csrf_token = get_random_string(16);
  11. request.session['csrf_token'] = csrf_token
  12. request.csrf = CSRFProtection(csrf_token)