From 6cc2732434fe282663257424f204329ec9f8c6c3 Mon Sep 17 00:00:00 2001 From: deyk Date: Tue, 15 May 2012 16:28:12 -0700 Subject: [PATCH] Added some protective decorators. --- cas_provider/views.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/cas_provider/views.py b/cas_provider/views.py index 9ceeca4..155189c 100644 --- a/cas_provider/views.py +++ b/cas_provider/views.py @@ -7,6 +7,10 @@ from urllib import urlencode import urllib2 import urlparse +from django.views.decorators.debug import sensitive_post_parameters +from django.views.decorators.cache import never_cache +from django.views.decorators.csrf import csrf_protect + from django.http import HttpResponse, HttpResponseRedirect from django.conf import settings from django.contrib.auth import login as auth_login, logout as auth_logout @@ -44,6 +48,9 @@ ERROR_MESSAGES = ( logger = logging.getLogger(__name__) +@sensitive_post_parameters() +@csrf_protect +@never_cache def login(request, template_name='cas/login.html', success_redirect=settings.LOGIN_REDIRECT_URL, warn_template_name='cas/warn.html', **kwargs): -- 2.20.1