Fixed #14446 -- Prevented the password reset confirmation view to be cached. Thanks, Paul and Gabriel.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@14890 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-12 22:59:03 +00:00 · 2010-12-12 22:59:03 +00:00 · 867e935c51
parent d8165ce156
commit 867e935c51
1 changed files with 1 additions and 0 deletions
--- a/django/contrib/auth/views.py
+++ b/django/contrib/auth/views.py
@ -163,6 +163,7 @@ def password_reset_done(request,
                              context_instance=RequestContext(request, current_app=current_app))

 # Doesn't need csrf_protect since no-one can guess the URL
+@never_cache
 def password_reset_confirm(request, uidb36=None, token=None,
                           template_name='registration/password_reset_confirm.html',
                           token_generator=default_token_generator,