test0908
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Refs #32579 -- Optimized good_hosts creation in CsrfViewMiddleware.process_view().

This commit is contained in:
Chris Jerdonek 2021-03-24 03:52:22 -07:00 committed by Mariusz Felisiak
parent 5388ff2a52
commit 70332e6c43
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
django/middleware/csrf.py
View File

@ -330,11 +330,10 @@ class CsrfViewMiddleware(MiddlewareMixin):
except DisallowedHost:
pass
# Create a list of all acceptable HTTP referers, including the
# current host if it's permitted by ALLOWED_HOSTS.
good_hosts = list(self.csrf_trusted_origins_hosts)
# Create an iterable of all acceptable HTTP referers.
good_hosts = self.csrf_trusted_origins_hosts
if good_referer is not None:
good_hosts.append(good_referer)
good_hosts = (*good_hosts, good_referer)
if not any(is_same_domain(referer.netloc, host) for host in good_hosts):
reason = REASON_BAD_REFERER % referer.geturl()