github / github/codespaces-django
CSRF checking fails for /admin on new projects
Open
- Dominant language
- Python
- Stars
- 129
- Forks
- 160
- PR merge metrics
- No merged PRs in 30d
Description
After creating a new project using `django-admin startproject`, CSRF checking fails for /admin.
This relates to the default project fixed under #8
Contributor guide
Research direction
Reproduce the failure with a project created by `django-admin startproject` and request `/admin`. Review the default project changes discussed in #8, then trace the CSRF failure from the generated project configuration. Done means a newly generated project passes CSRF checking when accessing `/admin`.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100