return 403 if csrf is not OK with our custom view
authorThierry Parmentelat <thierry.parmentelat@inria.fr>
Fri, 8 Mar 2013 13:28:37 +0000 (14:28 +0100)
committerThierry Parmentelat <thierry.parmentelat@inria.fr>
Fri, 8 Mar 2013 13:28:37 +0000 (14:28 +0100)
engine/manifoldproxy.py

index 1d629c7..52c747f 100644 (file)
@@ -7,7 +7,7 @@
 import json
 # this is for django objects only
 #from django.core import serializers
-from django.http import HttpResponse
+from django.http import HttpResponse, HttpResponseForbidden
 
 # xxx should probably cater for
 # format_in : how is the query encoded in POST
@@ -34,4 +34,4 @@ def api (request,format):
 failure_answer=[ "csrf_failure" ]
 def csrf_failure(request, reason=""):
     print "CSRF failure with reason '%s'"%reason
-    return HttpResponseForbidden (json.dump (failure_answer), mimetype="application/json")
+    return HttpResponseForbidden (json.dumps (failure_answer), mimetype="application/json")