3 v^@sddlmZddlmZmZddlmZeeZde_de_ GdddeZ ee Z de _d e _ Gd d d eZ ee Z d e _d e _ ddZdS))wraps)CsrfViewMiddleware get_token)decorator_from_middleware csrf_protectz This decorator adds CSRF protection in exactly the same way as CsrfViewMiddleware, but it can be used on a per view basis. Using both, or using the decorator multiple times, is harmless and efficient. c@seZdZddZdS)_EnsureCsrfTokencCsdS)N)selfrequestreasonrr@/usr/lib/python3.6/site-packages/django/views/decorators/csrf.py_rejectsz_EnsureCsrfToken._rejectN)__name__ __module__ __qualname__r rrrr rsrrequires_csrf_tokenz Use this decorator on views that need a correct csrf_token available to RequestContext, but without the CSRF protection that csrf_protect enforces. cs$eZdZddZfddZZS)_EnsureCsrfCookiecCsdS)Nr)r r r rrr r sz_EnsureCsrfCookie._rejectcstj||||}t||S)N)super process_viewr)r r callback callback_argscallback_kwargsretval) __class__rr r"sz_EnsureCsrfCookie.process_view)rrrr r __classcell__rr)rr rsrensure_csrf_cookiez Use this decorator to ensure that a view sets a CSRF cookie, whether or not it uses the csrf_token template tag, or the CsrfViewMiddleware is used. csfdd}d|_t|S)zCMark a view function as being exempt from the CSRF view protection.cs ||S)Nr)argskwargs) view_funcrr wrapped_view5sz!csrf_exempt..wrapped_viewT) csrf_exemptr)rrr)rr r 1s r N) functoolsrdjango.middleware.csrfrrdjango.utils.decoratorsrrr__doc__rrrrr rrrr s