summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCasey Duncan <casey.duncan@gmail.com>2011-01-06 00:11:22 -0700
committerCasey Duncan <casey.duncan@gmail.com>2011-01-06 00:11:22 -0700
commit3fe316cb75b4311fbc4c7610f140e423b30d9ff6 (patch)
tree89b512ba0d9892fd4e330550a0a3c8666a36d55c
parentedd530c7bf07ff902585b57a136c0ab8fafc9254 (diff)
downloadpyramid-3fe316cb75b4311fbc4c7610f140e423b30d9ff6.tar.gz
pyramid-3fe316cb75b4311fbc4c7610f140e423b30d9ff6.tar.bz2
pyramid-3fe316cb75b4311fbc4c7610f140e423b30d9ff6.zip
remove comment, it's more or less answered
-rw-r--r--docs/narr/sessions.rst3
1 files changed, 0 insertions, 3 deletions
diff --git a/docs/narr/sessions.rst b/docs/narr/sessions.rst
index bd0fe69bf..842b838cd 100644
--- a/docs/narr/sessions.rst
+++ b/docs/narr/sessions.rst
@@ -340,6 +340,3 @@ obtained via ``session.new_csrf_token()`` as a hidden input field named
if token != request.POST['csrf_token']:
raise ValueError('CSRF token did not match')
-.. comment::
- XXX Some advice on when a new csrf token should be generated would be
- useful. At login time? When the form is generated?