Ticket #6247: 6247.diff

docs/middleware.txt

@@ -154 +154 @@
-
-.. _Authentication in Web requests: ../authentication/#authentication-in-web-requests
-
+django.contrib.csrf.middleware.CsrfMiddleware
+---------------------------------------------
+
+**New in Django development version**
+
+Adds protection against Cross Site Request Forgeries by adding hidden form
+fields to POST forms and checking requests for the correct value. See the
+`Cross Site Request Forgery protection documentation`_.
+
+.. _`Cross Site Request Forgery protection documentation`: ../csrf/
+
-django.middleware.transaction.TransactionMiddleware
----------------------------------------------------
-