3 ms·
You don't need to store CSRF in sessions. Django doesn't by default. CSRF token can be entirely separate from sessions.
by hansonkd 2y ago
You don't need to store CSRF in sessions. Django doesn't by default.
CSRF token can be entirely separate from sessions.
- smagin 2y agonot even you don't need to, you shouldn't. Sessions shouldn't be accessible to js at all