Ticket #9172: django-trunk-remove-csrf-in-test-client.patch

django/test/client.py

@@ -57 +57 @@
 
         # Set up middleware if needed. We couldn't do this earlier, because
         # settings weren't available.
+
+        # remove csrf middleware because the test client doesn't, and doesn't
+        # need to, emulate a browser to the extent necessary to pass the csrf
+        # test.
+        if 'django.contrib.csrf.middleware.CsrfMiddleware' \
+                in settings.MIDDLEWARE_CLASSES:
+            middleware_classes = list(settings.MIDDLEWARE_CLASSES)
+            middleware_classes.remove('django.contrib.csrf.middleware.CsrfMiddleware')
+            settings.MIDDLEWARE_CLASSES = tuple(middleware_classes)
+
         if self._request_middleware is None:
             self.load_middleware()