diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index 50e15d7f94..a932a0e481 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -31,7 +31,7 @@ To enable CSRF protection for your views, follow these steps: 1. Add the middleware ``'django.middleware.csrf.CsrfViewMiddleware'`` to your list of middleware classes, :setting:`MIDDLEWARE_CLASSES`. (It should come - and before any view middleware that assume that CSRF attacks have + before any view middleware that assume that CSRF attacks have been dealt with.) Alternatively, you can use the decorator