Django Admin CSRF Coo​​kie问题

Question

我有一个带有django管理面板的网站，它工作正常，但是我看到刷新管理面板中的表单时，csrf cookie无法重新生成，它显示相同的内容。

Answer 1

Note that the CSRF token is not regenerated on page load. It is normal to see the same token used repeatedly.

In Django, the CSRF token is set to a random value for each session - it is also known as "session independent nonce". Other sites will not be able to access the CSRF token value in the cookie. If you create a new session, a new CSRF token will be used.

When you submit a form, Django will check that the CSRF token submitted in the form data matches the one in the cookie.

See https://docs.djangoproject.com/es/1.9/ref/csrf/#how-it-works for more information.