Django ajax file upload problem csrf

Question

I'm trying to do a ajax file upload using django. I am trying to make this example work

http://www.johnberns.com/2010/07/08/using-valums-jquery-ajax-upload-with-django-1-2/

But strangely I keep getting "None" for my csrf token and even more strange is that I am doing the POST call sending the file but all I get on the server is just the following dict:

{u'csrfmiddlewaretoken': [u'None']}

What am I doing wrong?

Daniel Roseman · Accepted Answer · 2010-10-12 10:54:24Z

2

The whole premise of that linked article is wrong. You don't need to worry about the CSRF token - CSRF protection is automatically disabled for Ajax uploads, since there is no way of making it work reliably. See the documentation.

answered Oct 12, 2010 at 10:54

Daniel Roseman

602k68 gold badges911 silver badges924 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dolan Antenucci Over a year ago

I think this is no longer the case with Django's 1.2.5 security release (all requests, regardless if Ajax, require csrf): djangoproject.com/weblog/2011/feb/08/security

Daniel Roseman Over a year ago

@dolan: that's true. The original article is still wrong though.

Collectives™ on Stack Overflow

Django ajax file upload problem csrf

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related