Properly return HTTP 403 when CSRF fails (not HTTP 500)

This commit is contained in:
Ryan Petrello 2018-06-28 09:33:39 -04:00
parent e8748fa147
commit 3b0f7de3e6
No known key found for this signature in database
GPG Key ID: F2AA5F2122351777

View File

@ -195,7 +195,7 @@ class APIView(views.APIView):
request.drf_request_user = getattr(drf_request, 'user', False)
except AuthenticationFailed:
request.drf_request_user = None
except ParseError as exc:
except (PermissionDenied, ParseError) as exc:
request.drf_request_user = None
self.__init_request_error__ = exc
return drf_request