禁止（CSRF令牌丢失或不正确。）Django+AngularJs

Question

当我试图呈现到django框架中的第二个页面时，出现以下错误。我觉得我的网址页面有问题视图.py但搞不清楚，什么都不能让你向前迈一步。。在

Forbidden (CSRF token missing or incorrect.): /renderbonds
[06/Sep/2016 00:21:55] "POST /renderbonds HTTP/1.1" 403 2502

这是我的html/django表单

^{pr2}$

在视图.pypython文件：

def home(request):
    tmpl_vars = {
        'all_posts': Post.objects.reverse(),
        'form': PostForm()
    }
    return render(request, 'pricing/bonds.html', tmpl_vars)

def renderbonds(request):
    """render shortcut : http://stackoverflow.com/questions/10388033/csrf-verification-failed-request-aborted"""
    if request.method == 'POST':
        post_text = request.POST.get('the_post')
        response_data = {}

        post = Post(text=post_text, author=request.user)
        post.save()

        """DATA MEEGEVEN"""
        response_data['year'] = post.year
        response_data['cashflow'] = post.cashflow

        return HttpResponse(
            json.dumps(response_data),
            content_type="application/json"
        )
    else:
        tmpl_vars = {
            'all_posts': Post.objects.reverse(),
            'form': PostForm()
        }
        return render(request,'pricing/bonds.html', tmpl_vars)

我的网址：

urlpatterns = [
    url(r'^$', views.calc,name='calc'),
    url(r'^$', views.home,'home'),
    url(r'^create_post/$',views.create_post,'create_post'),
    url(r'^renderbonds', views.home, name='home'),
    url(r'^/renderbonds', views.home, name='home'),
    url(r'^renderbonds/', views.home, name='home')

]

Answer 1

问题不在于你的url或视图，而在于你的模板。尝试添加{% csrf_token %}嵌套在模板中的<form></form>标记下。在

<form action="{% url 'renderbonds'%}" method="post" >
    <input type="submit" value="calculate bonds" class='button expand radius'/>
    {% csrf_token %}
</form>

有关详细信息，请参见the docs。在