summaryrefslogtreecommitdiff
path: root/docs/narr/viewconfig.rst
diff options
context:
space:
mode:
authorMichael Merickel <michael@merickel.org>2019-10-17 01:03:04 -0500
committerMichael Merickel <michael@merickel.org>2019-10-17 01:03:04 -0500
commitc67cc8722e3b26b729c3fed75db51395b56ac8a0 (patch)
treed9184484868d10967845e0efb1304b7339360966 /docs/narr/viewconfig.rst
parentcee110df1b5cd94938379a27000e32b471c3cb38 (diff)
downloadpyramid-c67cc8722e3b26b729c3fed75db51395b56ac8a0.tar.gz
pyramid-c67cc8722e3b26b729c3fed75db51395b56ac8a0.tar.bz2
pyramid-c67cc8722e3b26b729c3fed75db51395b56ac8a0.zip
remove check_csrf view predicate
Diffstat (limited to 'docs/narr/viewconfig.rst')
-rw-r--r--docs/narr/viewconfig.rst22
1 files changed, 0 insertions, 22 deletions
diff --git a/docs/narr/viewconfig.rst b/docs/narr/viewconfig.rst
index 465477b4d..6a49e02a5 100644
--- a/docs/narr/viewconfig.rst
+++ b/docs/narr/viewconfig.rst
@@ -479,28 +479,6 @@ configured view.
consideration when deciding whether or not to invoke the associated view
callable.
-``check_csrf``
- If specified, this value should be one of ``None``, ``True``, ``False``, or a
- string representing the "check name". If the value is ``True`` or a string,
- CSRF checking will be performed. If the value is ``False`` or ``None``, CSRF
- checking will not be performed.
-
- If the value provided is a string, that string will be used as the "check
- name". If the value provided is ``True``, ``csrf_token`` will be used as the
- check name.
-
- If CSRF checking is performed, the checked value will be the value of
- ``request.POST[check_name]``. This value will be compared against the
- value of ``request.session.get_csrf_token()``, and the check will pass if
- these two values are the same. If the check passes, the associated view will
- be permitted to execute. If the check fails, the associated view will not be
- permitted to execute.
-
- Note that using this feature requires a :term:`session factory` to have been
- configured.
-
- .. versionadded:: 1.4a2
-
``physical_path``
If specified, this value should be a string or a tuple representing the
:term:`physical path` of the context found via traversal for this predicate