django中间件

1.跨站请求伪造

中间件的执行顺序从上往下的读

MIDDLEWARE = [   # 从上往下的读
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    # 'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'app01.mymiddelware.MyMiddleware1',# 
    'app01.mymiddelware.MyMiddleware2',
]

新建一个文件middleware.py

与这个文件代码顺序无关

from django.utils.deprecation import MiddlewareMixin

class MyMiddleware2(MiddlewareMixin):
    def process_request(self,request):
        print('MyMiddleware--------2------->')

class MyMiddleware1(MiddlewareMixin):
    def process_request(self,request):
        print('MyMiddleware--------1------->')

2.process_request 执行顺序从上往下

请求来的时候,会响应它

http://127.0.0.1:8000/test_middle/?name=shouyue 
输入这个网站 用GET提取shouyue

3.process_response 执行顺序从下往上

响应回去的时候,会走它

错误示范

from django.utils.deprecation import MiddlewareMixin
class MyMiddleware2(MiddlewareMixin):
    def process_request(self,request):
        print('MyMiddleware--------request2------->')
    def process_response(self,request,response):
        print('MyMiddleware--------response2------->')
class MyMiddleware1(MiddlewareMixin):
    def process_request(self,request):
        print('MyMiddleware--------request1------->')
    def process_response(self, request, response):
        print('MyMiddleware--------response1------->')

报错

if response.get('X-Frame-Options') is not None:
AttributeError: 'NoneType' object has no attribute 'get'
[13/Jan/2021 15:03:22] "GET /test_middle/?name=shouyue HTTP/1.1" 500 58271

原因

# wiews.py文件第一次返回响应
def test_middle(r