diff --git a/django/views/csrf.py b/django/views/csrf.py index 9018bd981a..a709e5fc1c 100644 --- a/django/views/csrf.py +++ b/django/views/csrf.py @@ -59,7 +59,7 @@ CSRF_FAILURE_TEMPLATE = """

In general, this can occur when there is a genuine Cross Site Request Forgery, or when Django's + href="https://docs.djangoproject.com/en/{{ docs_version }}/ref/csrf/">Django's CSRF mechanism has not been used correctly. For POST forms, you need to ensure:

@@ -67,7 +67,7 @@ CSRF_FAILURE_TEMPLATE = """
  • Your browser is accepting cookies.
  • The view function uses RequestContext + href="https://docs.djangoproject.com/en/{{ docs_version }}/ref/templates/api/#subclassing-context-requestcontext">RequestContext for the template, instead of Context.
  • In the template, there is a {% templatetag openblock %} csrf_token