Django Middleware: Csrfviewmiddleware

1, Csrfviewmiddleware

1.1, CSRF: cross-site request forgery

CSRF is all called the Cross-site request forgery, also known as: one click Attack/session Riding, abbreviated as: CSRF/XSRF.

You can understand that. CSRF attack: An attacker steals your identity and sends a malicious request on your behalf. The things that CSRF can do include: Send mail in your name, message, steal your account, even buy goods, virtual money transfer ... Issues include: personal privacy breaches and property security.

1.2, the role of Csrfviewmiddleware:

1. when render returns to the page, a hidden input tag is plugged into the page

2. When you submit the post data, it will help you verify, if the checksum does not pass the request to reject

Django Middleware: Csrfviewmiddleware