summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/narr/sessions.rst3
1 files changed, 0 insertions, 3 deletions
diff --git a/docs/narr/sessions.rst b/docs/narr/sessions.rst
index bd0fe69bf..842b838cd 100644
--- a/docs/narr/sessions.rst
+++ b/docs/narr/sessions.rst
@@ -340,6 +340,3 @@ obtained via ``session.new_csrf_token()`` as a hidden input field named
if token != request.POST['csrf_token']:
raise ValueError('CSRF token did not match')
-.. comment::
- XXX Some advice on when a new csrf token should be generated would be
- useful. At login time? When the form is generated?