![]() ![]() For moreĪdded support for cookie version 2. Has been shown to be insecure and has been removed. ``X-Requested-With: XMLHTTPRequest`` was present. Prior to release 1.1.1, this check was ignored if the HTTP header (the latter is accepted for compatibility with Django). Or in a custom HTTP header named ``X-XSRFToken`` or ``X-CSRFToken`` The ``_xsrf`` value may be set as either a form field named ``_xsrf`` Reject the form submission as a potential forgery. To prevent cross-site request forgery, we set an ``_xsrf``Ĭookie and include the same value as a non-cookieįield with all ``POST`` requests. Verifies that the ``_xsrf`` cookie matches the ``_xsrf`` argument. _remove_control_chars_regex = re.compile(r"") _INVALID_HEADER_CHAR_RE = re.compile(br"") ![]() Inherited by _test.GoogleOpenIdClientLoginHandler, _test.OAuth1ClientLoginHandler, _test.OAuth1ClientRequestParametersHandler, _test.OAuth1ServerAccessTokenHandler, _test.OAuth1ServerRequestTokenHandler, _test.OAuth2ClientLoginHandler, _test.OpenIdClientLoginHandler, _test.OpenIdServerAuthenticateHandler, _test.TwitterClientHandler, _test.TwitterServerAccessTokenHandler, _test.TwitterServerShowUserHandler, _test.TwitterServerVerif圜redentialsHandler, _test.HelloHandler, _httpclient_test.ContentLengthHandler, _httpclient_test.EchoPostHandler, _httpclient_test.HangHandler, _httpclient_test.HeadHandler, _httpclient_test.HostEchoHandler, _httpclient_test.NoContentHandler, _httpclient_test.NoContentLengthHandler, _httpclient_test.OptionsHandler, _httpclient_test.RespondInPrepareHandler, _httpclient_test.SeeOtherGetHandler, _httpclient_test.SeeOtherPostHandler, _httpclient_test.TriggerHandler, tornado::test::web_test.AllHTTPMethodsTest::Handler, _test.AuthRedirectRequestHandler, tornado::test::web_test.ClearAllCookiesTest::Handler, tornado::test::web_test.ClearHeaderTest::Handler, tornado::test::web_test.ClientCloseTest::Handler, _test.ConnectionCloseHandler, _test.CookieTestRequestHandler, tornado::test::web_test.DateHeaderTest::Handler, _test.DecodeArgHandler, _test.EchoHandler, _test.EmptyFlushCallbackHandler, tornado::test::web_test.ExceptionHandlerTest::Handler, tornado::test::web_test.FinishExceptionTest::Handler, tornado::test::web_test.FinishInPrepareTest::Handler, _test.FlowControlHandler, tornado::test::web_test.GetArgumentErrorTest::Handler, _test.GetArgumentHandler, _test.GetArgumentsHandler, tornado::test::web_test.GzipTestCase::Handler, tornado::test::web_test.Header304Test::Handler, _test.HeaderInjectionHandler, _test.HelloHandler, tornado::test::web_test.HostMatchingTest::Handler, _test.LinkifyHandler, _test.MultiHeaderHandler, tornado::test::web_test.MultipleExceptionTest::Handler, _test.OptionalPathHandler, tornado::test::web_test.PatchMethodTest::Handler, tornado::test::web_test.PathArgsInPrepareTest::Handler, tornado::test::web_test.RaiseWithReasonTest::Handler, _test.RedirectHandler, tornado::test::web_test.SetCurrentUserTest::Handler, tornado::test::web_test.StatusReasonTest::Handler, _test.TypeCheckHandler, tornado::test::web_test.UIMethodUIModuleTest::Handler, _test.UIModuleResourceHandler, tornado::test::web_test.UnimplementedHTTPMethodsTest::Handler, tornado::test::web_test.UnimplementedNonStandardMethodsTest::Handler, tornado::test::web_test.XSRFTest::Handler,, ,, , and.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |