The error messages this produces aren't exactly user-friendly:
|
await send_csrf_failed( |
|
scope, |
|
wrapped_send, |
|
"form-urlencoded POST field did not match cookie", |
|
) |
|
await send_csrf_failed( |
|
scope, |
|
wrapped_send, |
|
"multipart/form-data POST field did not match cookie", |
|
) |
|
return |
|
except FileBeforeToken: |
|
await send_csrf_failed( |
|
scope, |
|
wrapped_send, |
|
"File encountered before csrftoken - make sure csrftoken is first in the HTML", |
|
) |
|
return |
|
# Now replay the body |
|
await app(scope, replay_receive, wrapped_send) |
|
return |
|
else: |
|
await send_csrf_failed( |
|
scope, wrapped_send, message="Unknown content-type" |
|
) |
|
return |