... Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies regarding XMLHttpRequest. In the context ... quest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google made members of the Ru ... ow request リリースノート compatibility development using features incompatible checks form submission made basis toolkits Requested クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies regarding XMLHttpRequest. In the context ... quest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google made members of the Ru ... ... Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies regarding XMLHttpRequest. In the context ... quest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google made members of the Ru ... ... Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies regarding XMLHttpRequest. In the context ... quest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google made members of the Ru ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... ... and directory creation, resulting in file system objects being created with unintended permissions. Django now applies the requested permissions via chmod() after mkdir() , removing the dependency on the process-wide umask. This issue has severity "low" a ... 2026年10月08日