mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-24 06:06:09 +00:00
Code Issues 32 Releases Wiki Activity

Fixed #28488 -- Reallowed error handlers to access CSRF tokens.

Browse Source 
Regression in eef95ea96f.
This commit is contained in:
Florian Apolloner
2017-09-17 22:24:05 +02:00
committed by Tim Graham
parent 77f82c4bf1
commit c4c128d67c
5 changed files with 57 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/releases/1.11.6.txt
View File

@@ -14,3 +14,7 @@ Bugfixes
* Fixed crash when using the name of a model's autogenerated primary key
(``id``) in an ``Index``'s ``fields`` (:ticket:`28597`).
* Fixed a regression in Django 1.9 where a custom view error handler such as
``handler404`` that accesses ``csrf_token`` could cause CSRF verification
failures on other pages (:ticket:`28488`).