Skip to content

Commit

Permalink
Do not include cookies with empty value
Browse files Browse the repository at this point in the history
  • Loading branch information
jvdboog committed May 8, 2024
1 parent 6a7f4d6 commit a4991d7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion django_nextjs/render.py
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ def _get_nextjs_request_cookies(request: HttpRequest):
(i.e. dont use HTTP unsafe methods or GraphQL mutations).
https://docs.djangoproject.com/en/3.2/ref/csrf/#is-posting-an-arbitrary-csrf-token-pair-cookie-and-post-data-a-vulnerability
"""
unreserved_cookies = {k: v for k, v in request.COOKIES.items() if not morsel.isReservedKey(k)}
unreserved_cookies = {k: v for k, v in request.COOKIES.items() if not morsel.isReservedKey(k) and v}
return {**unreserved_cookies, settings.CSRF_COOKIE_NAME: get_csrf_token(request)}


Expand Down

0 comments on commit a4991d7

Please sign in to comment.