vÅÏ^ã@sÌddlmZddlmZmZddlmZeeƒZde_de_ Gdd„deƒZ ee ƒZ de _d e _ Gd d „d eƒZ ee ƒZ d e _d e _ dd„ZdS)é)Úwraps)ÚCsrfViewMiddlewareÚ get_token)Údecorator_from_middlewareÚ csrf_protectzË This decorator adds CSRF protection in exactly the same way as CsrfViewMiddleware, but it can be used on a per view basis. Using both, or using the decorator multiple times, is harmless and efficient. c@seZdZdd„ZdS)Ú_EnsureCsrfTokencCsdS)N©)ÚselfÚrequestÚreasonrrú>/tmp/pip-build-8lau8j11/django/django/views/decorators/csrf.pyÚ_rejectsz_EnsureCsrfToken._rejectN)Ú__name__Ú __module__Ú __qualname__r rrrr rs rÚrequires_csrf_tokenz• Use this decorator on views that need a correct csrf_token available to RequestContext, but without the CSRF protection that csrf_protect enforces. cs.eZdZdd„Z‡fdd†Z‡S)Ú_EnsureCsrfCookiecCsdS)Nr)r r r rrr r sz_EnsureCsrfCookie._rejectcs)tƒj||||ƒ}t|ƒ|S)N)ÚsuperÚ process_viewr)r r ÚcallbackÚ callback_argsÚcallback_kwargsÚretval)Ú __class__rr r"s z_EnsureCsrfCookie.process_view)rrrr rrr)rr rs  rÚensure_csrf_cookiez• Use this decorator to ensure that a view sets a CSRF cookie, whether or not it uses the csrf_token template tag, or the CsrfViewMiddleware is used. cs+‡fdd†}d|_tˆƒ|ƒS)zCMark a view function as being exempt from the CSRF view protection.cs ˆ||ŽS)Nr)ÚargsÚkwargs)Ú view_funcrr Ú wrapped_view5sz!csrf_exempt..wrapped_viewT)Ú csrf_exemptr)rrr)rr r1s rN)Ú functoolsrZdjango.middleware.csrfrrZdjango.utils.decoratorsrrrÚ__doc__rrrrrrrrr Ús