Python web-Django CSRF跨站请求伪造防护( 四 )_前言CSRF全称Cross-siterequestforgery

通过cookies获取到csrftoken ，

// using jQuery

function getCookie(name) {

var cookieValue = https://mparticle.uc.cn/api/null;

if (document.cookie && document.cookie !== '') {

var cookies = document.cookie.split(';');

for (var i = 0; i < cookies.length; i++) {

var cookie = jQuery.trim(cookies[i
);

// Does this cookie string begin with the name we want?

if (cookie.substring(0 name.length + 1) === (name + '=')) {

cookieValue = https://mparticle.uc.cn/api/decodeURIComponent(cookie.substring(name.length + 1));

break;

Python web-Django CSRF跨站请求伪造防护( 四 )