Merge pull request #148 from shivateja/patch-1

CSRF should use the variable
This commit is contained in:
Sahat Yalkabov
2014-05-13 01:11:13 -04:00

View File

@ -477,7 +477,7 @@ added in the [pull request #40](https://github.com/sahat/hackathon-starter/pull/
as part of CSRF protection.
```
input(type='hidden', name='_csrf', value='_csrf')
input(type='hidden', name='_csrf', value=_csrf)
```
**Note:** It is now possible to whitelist certain URLs. In other words you can