[rietveld] push by albrecht.andi - Print out posted data when XSRF token is invalid (issue361).... on 2012-05-08 18:55 GMT

[riet...@googlecode.com]

Revision: fffdfa546f68
Author: Andi Albrecht <albrec...@gmail.com>
Date: Tue May 8 11:55:41 2012
Log: Print out posted data when XSRF token is invalid (issue361).

Review: http://codereview.appspot.com/6190058/
http://code.google.com/p/rietveld/source/detail?r=fffdfa546f68

Modified:
/codereview/views.py

=======================================
--- /codereview/views.py Fri Apr 6 14:07:20 2012
+++ /codereview/views.py Tue May 8 11:55:41 2012
@@ -681,7 +681,16 @@
# Try the previous hour's token
xsrf_token = account.get_xsrf_token(-1)
if post_token != xsrf_token:
- return HttpTextResponse('Invalid XSRF token.', status=403)
+ msg = [u'Invalid XSRF token.']
+ if request.POST:
+ msg.extend([u'',
+ u'However, this was the data posted to the
server:',
+ u''])
+ for key in request.POST:
+ msg.append(u'%s: %s' % (key, request.POST[key]))
+ msg.extend([u'', u'-'*10,
+ u'Please reload the previous page and post
again.'])
+ return HttpTextResponse(u'\n'.join(msg), status=403)
return func(request, *args, **kwds)

return xsrf_wrapper