Document {{ csrf_input }} in Jinja2 templates

[Aymeric Augustin]

It's the equivalent of {% csrf_token %} in Django templates.

It appears that I forgot to document it.

[Tim Graham]

There's a mention in the ​Jinja2 backend docs. Did you miss it or have another place in mind?

[Aymeric Augustin]

I saw that mention but I don't think it's sufficiently explicit about how to use that variable.

We should say that:

• {% csrf_token %} in Django templates translates to {{ csrf_input }} in Jinja2 templates
• {{ csrf_token }} works identically in Django templates and in Jinja2 templates

[Alberto Julio Leal Rivera]

diff file

[Alberto Julio Leal Rivera]

Hi I just uploaded a diff file. Are this the changes needed?
Thanks

[Aymeric Augustin]

I believe this information would be more discoverable in the CSRF reference documentation, either in the "How to use it" section or in a new section.

We should talk about:

• the API offered by built-in template backends
• requirements for third-party backends, as described in ​DEP 182 (basically they have to provide a solution, but that solution isn't specified)

This will likely require tweaking the content a bit to clarify that the main examples are specific to Django templates.

[Alberto Julio Leal Rivera]

ok, I am working on it!

[Alberto Julio Leal Rivera]

{% csrf_token %} in Django templates translates to {{ csrf_input }} in Jinja2 templates

This is already specified in ​https://docs.djangoproject.com/en/dev/ref/csrf/#other-template-engines

{{ csrf_token }} works identically in Django templates and in Jinja2 templates

Should I put another example in step # 2 in ​https://docs.djangoproject.com/en/dev/ref/csrf/#how-to-use-it ?, something like

<div style="display:none">
    <input type="hidden" name="csrfmiddlewaretoken" value="{{ csrf_token }}">
</div>

[Aymeric Augustin]

The paragraph you just linked to only mentions {{ csrf_token }}, not {{ csrf_input }}.

It's precisely because it's incomplete that I filed this ticket.

[Carl Meyer]

Since it's been three weeks without a status update, I'm freeing this ticket up for claiming by a PyCon sprinter.

[Tim Graham <timograham@…>]

In 9c53facc:

Fixed #26596 -- Added Jinja2 {{ csrf_input }} documentation.

[Tim Graham <timograham@…>]

In 926529d:

[1.10.x] Fixed #26596 -- Added Jinja2 {{ csrf_input }} documentation.

Backport of 9c53facc45908bc0593de194a60bc75e5d34a48e from master

[Tim Graham <timograham@…>]

In 16ce7a51:

[1.9.x] Fixed #26596 -- Added Jinja2 {{ csrf_input }} documentation.

Backport of 9c53facc45908bc0593de194a60bc75e5d34a48e from master