Closed sivy closed 13 years ago
All methods must be called via POST, including a get on a pk
. I'll add a note in the security section.
Excellent.
On Tue, Apr 26, 2011 at 9:26 AM, joestump reply@reply.github.com wrote:
All methods must be called via POST, including a get on a
pk
. I'll add a note in the security section.Reply to this email directly or view it on GitHub: https://github.com/joestump/django-ajax/issues/1#comment_1059137
Steve Ivy http://monkinetic.com // http://diso-project.org This email is: [ ] bloggable [x] ask first [ ] private
The README should include information on which methods should be called via GET and which should be called via POST. Relatedly, if
ajax/{some_app_name}/{model}.json
and/ajax/{some_app_name}/{model}/{pk}/(update|delete).json
can be called via GET, they probably shouldn't be.