mirror of
				https://github.com/django/django.git
				synced 2025-10-31 01:25:32 +00:00 
			
		
		
		
	Fixed #23585 - Corrected internal comment.
Removed misleading comment and provide correct one, explaining idea behind hardcoded CSRF template context processor.
This commit is contained in:
		| @@ -3,9 +3,7 @@ from django.utils.module_loading import import_string | ||||
|  | ||||
| # Cache of actual callables. | ||||
| _standard_context_processors = None | ||||
| # We need the CSRF processor no matter what the user has in their settings, | ||||
| # because otherwise it is a security vulnerability, and we can't afford to leave | ||||
| # this to human error or failure to read migration instructions. | ||||
| # Hard-coded processor for easier use of CSRF protection. | ||||
| _builtin_context_processors = ('django.core.context_processors.csrf',) | ||||
|  | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user