Ticket #15055: django15055.formsdocs.diff

docs/topics/forms/index.txt

@@ -173 +173 @@
 context variable ``form``. Here's a simple example template::
 
     <form action="/contact/" method="post">
+    {% csrf_token %}
     {{ form.as_p }}
     <input type="submit" value="Submit" />
     </form>
@@ -180 +181 @@
 The form only outputs its own fields; it is up to you to provide the surrounding
 ``<form>`` tags and the submit button.
 
+.. admonition:: Forms and Cross Site Request Forgery protection
+
+   Django ships with an easy-to-use :doc:`protection against Cross Site Request
+   Forgeries </ref/contrib/csrf>` in forms. This protection is manifested by 
+   the :ttag:`crsf_token` template tag in this example. For sake of purely 
+   explaining using forms in templates, this tag is not displayed in further
+   examples in this document.
+
 ``form.as_p`` will output the form with each form field and accompanying label
 wrapped in a paragraph. Here's the output for our example template::