Django 3 Web Development Cookbook - Fourth Edition

Making forms secure from Cross-Site Request Forgery (CSRF)

Without the proper precautions, malicious sites could potentially invoke requests against your website, which would result in undesired changes being made to your server. For example, they could affect a user's authentication or alter content without the user's consent. Django comes bundled with a system for preventing CSRF attacks such as these, and we'll review that in this recipe.