Commit cb928935 authored by Luke Plant's avatar Luke Plant
Browse files

[1.0.X] Fixed #10884 - more lenient regexp for matching forms in CSRF post-processing 

  
Thanks to Ryszard Szopa for the report and fix

Backport of r10617


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10618 bcc190cf-cafb-0310-a4f2-bffc1f526a37
parent 725ffa57

django/contrib/csrf/middleware.py

+1 −1
Original line number Diff line number Diff line
@@ -16,7 +16,7 @@ from django.utils.safestring import mark_safe 
_ERROR_MSG = mark_safe('<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"><body><h1>403 Forbidden</h1><p>Cross Site Request Forgery detected. Request aborted.</p></body></html>')



_POST_FORM_RE = \

    re.compile(r'(<form\W[^>]*\bmethod=(\'|"|)POST(\'|"|)\b[^>]*>)', re.IGNORECASE)

    re.compile(r'(<form\W[^>]*\bmethod\s*=\s*(\'|"|)POST(\'|"|)\b[^>]*>)', re.IGNORECASE)



_HTML_TYPES = ('text/html', 'application/xhtml+xml')