Django 取消当前防跨站请求伪造功能

导入 from django.views.decorators.csrf import csrf_exempt, csrf_protect.

方法
csrf_exempt 取消当前防跨站请求伪造功能
csrf_protect 强制设置当前防跨站请求伪造功能

示例

from django.views.decorators.csrf import csrf_exempt, csrf_protect

@csrf_exempt
def login(request: WSGIRequest):
    if request.method == "POST":
        user = request.POST.get("username")
        password = request.POST.get("password")

        if user == "1" and password == "p":
            response = redirect("/app01/index/")
            response.set_signed_cookie(CookieKey_Login, "1", salt=SALT_KEY)
            return response
    return render(request, "login.html")