gibus [Mon, 21 May 2012 16:50:42 +0200] rev 439
Reverts to changeset 435, and just add {% csrf_token %} to template forgot_pw.html, since CSRF protection seems to be only here (surely because of django.contrib.auth.views).
Production Moz <dev@sopinspace.com> [Sat, 19 May 2012 10:21:54 +0200] rev 438
Fix side effects with csrf token, add csrf_token to every post form + add ajax (see http://stackoverflow.com/questions/5100539/django-csrf-check-failing-with-an-ajax-post-request), remove django.middleware.csrf.CsrfViewMiddleware ?!
Production Moz <dev@sopinspace.com> [Fri, 18 May 2012 00:07:32 +0200] rev 437
Avoids HTTP 403 on login and reset/change password, seehttps://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ref-contrib-csrf.
Production Moz <dev@sopinspace.com> [Thu, 17 May 2012 23:58:03 +0200] rev 436
Avoids HTTP 403 on reset password, seehttps://docs.djangoproject.com/en/dev/ref/contrib/csrf/#ref-contrib-csrf.
Production Moz <dev@sopinspace.com> [Tue, 15 May 2012 14:15:34 +0200] rev 435
Fixed comments filter by name when name is empty
gibus [Tue, 15 May 2012 12:22:28 +0200] rev 434
Fixed bad string for export to ms-word 2007.