... ission, and validates it. Prior to Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies re ... with XMLHttpRequest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google mad ... rigin Rails allow request リリースノート compatibility development using features incompatible checks form submission made basis toolkits Requested クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... ission, and validates it. Prior to Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies re ... with XMLHttpRequest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google mad ... ... ission, and validates it. Prior to Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies re ... with XMLHttpRequest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google mad ... ... ission, and validates it. Prior to Django 1.2.5, our CSRF protection made an exception for AJAX requests, on the following basis: Many AJAX toolkits add an X-Requested-With header when using XMLHttpRequest. Browsers have strict same-origin policies re ... with XMLHttpRequest. Therefore, for ease of use, we did not apply CSRF checks to requests that appeared to be AJAX on the basis of the X-Requested-With header. The Ruby on Rails web framework had a similar exemption. Recently, engineers at Google mad ... ... citly set DEFAULT_AUTO_FIELD to AutoField : DEFAULT_AUTO_FIELD = "django.db.models.AutoField" or configure it on a per-app basis: from django.apps import AppConfig class MyAppConfig ( AppConfig ): default_auto_field = "django.db.models.AutoField" name ... = "my_app" or on a per-model basis: from django.db import models class MyModel ( models . Model ): id = models . AutoField ( primary_key = True ) In anticipa ... ... citly set DEFAULT_AUTO_FIELD to AutoField : DEFAULT_AUTO_FIELD = "django.db.models.AutoField" or configure it on a per-app basis: from django.apps import AppConfig class MyAppConfig ( AppConfig ): default_auto_field = "django.db.models.AutoField" name ... = "my_app" or on a per-model basis: from django.db import models class MyModel ( models . Model ): id = models . AutoField ( primary_key = True ) In anticipa ... ... d refactoring of Django's bundled administrative application. This became part of Django as of the 1.0 release, and is the basis of the current incarnation of django.contrib.admin . queryset-refactor : A refactoring of the internals of Django's object ... ... tion in Nonce usage . デコレータ ¶ Django provides decorators to control the Content Security Policy headers on a per-view basis. These allow overriding or disabling the enforced or report-only policy for specific views, providing fine-grained control ... ... g without the label_suffix , instantiate the form label_suffix='' . You can also customize the label_suffix on a per-field basis using the new label_suffix parameter on label_tag() . Admin views _changelist_filters GET parameter ¶ To achieve preservin ... g a client-side library which sets cookies, like Google Analytics . This makes the cache effectively work on a per-session basis regardless of the CACHE_MIDDLEWARE_ANONYMOUS_ONLY setting. SEND_BROKEN_LINK_EMAILS setting ¶ CommonMiddleware used to prov ... ... d refactoring of Django's bundled administrative application. This became part of Django as of the 1.0 release, and is the basis of the current incarnation of django.contrib.admin . queryset-refactor : A refactoring of the internals of Django's object ... 2026年10月08日