2012-12-26 72 views
1

在龍捲風應用程序,我把設置如何將xsrf cookie傳遞給主機?

設置=字典( cookie_secret = 「11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o /」, xsrf_cookies =真, autoescape = 「xhtml_escape」, ) (來自網絡,不會改變cookie_secret複製)和我試圖使用curl

curl -d "name=Paola&last_name=James" --header "X-CSRFToken:11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" http://127.0.0.1:8000/registration 

從命令行執行,我得到了錯誤,如

curl: (6) Couldn't resolve host 'X-CSRFToken:11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o' 
<html><title>403: Forbidden</title><body>403: Forbidden</body></html> 

如何將xsrf傳遞給主機?

回答

1

XSRF必須在cookie頭通過,and in the form data OR X-CSRFToken/X-XSRFToken

curl -d "name=Paola&last_name=James&_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" --cookie "_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/; Path=/" http://127.0.0.1:8000/registration 

curl -d "name=Paola&last_name=James" --cookie "_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/; Path=/" --header "X-CSRFToken: 11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" http://127.0.0.1:8000/registration