Ticket #14565: add_csrf_protect.diff

django/views/defaults.py

@@ -1 +1 @@
 from django import http
 from django.template import Context, RequestContext, loader
+from django.views.decorators.csrf import csrf_protect
 
+@csrf_protect
 def page_not_found(request, template_name='404.html'):
     """
     Default 404 handler.
@@ -13 +15 @@
     t = loader.get_template(template_name) # You need to create a 404.html template.
     return http.HttpResponseNotFound(t.render(RequestContext(request, {'request_path': request.path})))
 
+@csrf_protect
 def server_error(request, template_name='500.html'):
     """
     500 error handler.