Bypass wrapped CSRF in custom setlang proxy

This commit is contained in:
2026-04-11 20:55:30 +02:00
parent 605f1e8276
commit 497addffb2

View File

@@ -1,5 +1,7 @@
from __future__ import annotations from __future__ import annotations
import inspect
from django.http import HttpRequest, HttpResponse from django.http import HttpRequest, HttpResponse
from django.views.decorators.csrf import csrf_exempt from django.views.decorators.csrf import csrf_exempt
from django.views.i18n import set_language as django_set_language from django.views.i18n import set_language as django_set_language
@@ -23,4 +25,4 @@ def set_language_normalized(request: HttpRequest) -> HttpResponse:
get_data["next"] = normalize_set_language_next(next_value) get_data["next"] = normalize_set_language_next(next_value)
request.GET = get_data request.GET = get_data
return django_set_language(request) return inspect.unwrap(django_set_language)(request)