Django - Security Best Practices
A developer tries to fix a security warning by adding
@csrf_exempt to a Django view. What is the impact?A developer tries to fix a security warning by adding @csrf_exempt to a Django view. What is the impact?
medium📝 Debug Q7 of 15
Step-by-Step Solution
Solution:
Step 1: Understand what @csrf_exempt does
This decorator disables CSRF protection on the decorated view.Step 2: Identify security consequences
Disabling CSRF protection increases risk of cross-site request forgery attacks on that view.Final Answer:
It disables CSRF protection for that view, increasing risk -> Option DQuick Check:
@csrf_exempt disables CSRF, raising risk [OK]
Quick Trick: Avoid @csrf_exempt unless absolutely necessary [OK]
Common Mistakes:
MISTAKES- Thinking @csrf_exempt adds protection
- Confusing CSRF with SQL injection fixes
- Assuming it forces HTTPS
Master "Security Best Practices" in Django
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Django Quizzes