Use text/html for CSRF error page, refs #2390

pull/2401/head
Simon Willison 2024-08-15 08:48:47 -07:00
rodzic 160d82f06e
commit 05dfd34fd0
2 zmienionych plików z 4 dodań i 2 usunięć

Wyświetl plik

@ -1661,11 +1661,12 @@ class Datasette:
async def custom_csrf_error(scope, send, message_id):
await asgi_send(
send,
await self.render_template(
content=await self.render_template(
"csrf_error.html",
{"message_id": message_id, "message_name": Errors(message_id).name},
),
403,
status=403,
content_type="text/html; charset=utf-8",
)
asgi = asgi_csrf.asgi_csrf(

Wyświetl plik

@ -1171,4 +1171,5 @@ async def test_custom_csrf_error(ds_client):
cookies={"csrftoken": "x"},
)
assert response.status_code == 403
assert response.headers["content-type"] == "text/html; charset=utf-8"
assert "Error code is FORM_URLENCODED_MISMATCH." in response.text