From d3641d889b0cf6fde3ca7d08530ed55331a0607d Mon Sep 17 00:00:00 2001 From: Luke Plant Date: Mon, 9 May 2011 23:00:02 +0000 Subject: [PATCH] Clarified wording about use of 2 decorators in CSRF docs git-svn-id: http://code.djangoproject.com/svn/django/trunk@16198 bcc190cf-cafb-0310-a4f2-bffc1f526a37 --- docs/ref/contrib/csrf.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index c3c01c0b06..762c517084 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -365,7 +365,8 @@ There may be some views that are unprotected and have been exempted by ``csrf_exempt``, but still need to include the CSRF token. Solution: use :func:`~django.views.decorators.csrf.csrf_exempt` followed by -:func:`~django.views.decorators.csrf.requires_csrf_token`. +:func:`~django.views.decorators.csrf.requires_csrf_token`. (i.e. ``requires_csrf_token`` +should be the innermost decorator). View needs protection for one path ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~