2012-12-26 73 views
1

在龙卷风应用程序,我把设置如何将xsrf cookie传递给主机?

设置=字典( cookie_secret = “11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o /”, xsrf_cookies =真, autoescape = “xhtml_escape”, ) (来自网络,不会改变cookie_secret复制)和我试图使用curl

curl -d "name=Paola&last_name=James" --header "X-CSRFToken:11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" http://127.0.0.1:8000/registration 

从命令行执行,我得到了错误,如

curl: (6) Couldn't resolve host 'X-CSRFToken:11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o' 
<html><title>403: Forbidden</title><body>403: Forbidden</body></html> 

如何将xsrf传递给主机?

回答

1

XSRF必须在cookie头通过,and in the form data OR X-CSRFToken/X-XSRFToken

curl -d "name=Paola&last_name=James&_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" --cookie "_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/; Path=/" http://127.0.0.1:8000/registration 

curl -d "name=Paola&last_name=James" --cookie "_xsrf=11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/; Path=/" --header "X-CSRFToken: 11oETzKXQAGaYdkL5gEmGeJJFuYh7EQnp2XdTP1o/" http://127.0.0.1:8000/registration