Editing Posting JSON Data to a Django App (section)

== Testing POST data with curl ==

* [https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#rejected-requests CSRF Tokens and Rejected Requests] (Django documentation)

By default Django checks for Cross Site Request Forgery (CSRF) for POST requests. This will cause a 403 response for `curl` requests that don't include csrf token values in the POST data. 

Maybe `curl` isn't the correct way to test POST requests. Maybe it should be done with Django tests instead. 

One way around this is to mark a view as being exempt from CSRF protection: 
<syntaxhighlight lang="python">
from django.views.decorators.csrf import csrf_exempt

@csrf_exempt
def my_view(request):
    return HttpResponse('Hello world')
</syntaxhighlight>

[[Category:Django]] [[Category:Python]] [[Category:Web Development]]