Monday, March 8, 2021

Re: What values is expected for CSRF_COOKIE_PATH ?

Some sites have Django installed in a sub-path of their site, e.g. http://mydomain.com/django/.  In that case, you can set it to "/django-project/" or "/".  Since the default is / you don't need to do anything.  If you have two separate Django installations on one site, then you need to change it because the two CSRF tokens will have different values.

On Jan 29, 2021, at 6:46 AM, akash tyagi <tyagiaakash001@gmail.com> wrote:

This should either match the URL path of your Django installation or be a parent of that path. 
This sentence is confusing to me. 

Suppose my domain name is demo.com , and I have django apps as App1,App2. Both uses CSRF token. What should be the correct CSRF_COOKIE_PATH here ?



--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/5ed1519e-436b-4a65-9c8f-d89b3545b069n%40googlegroups.com.

No comments:

Post a Comment