pythonforfacebook/django-facebook — Issue #8: Skipping CSRF validation upon valid signed request
Author: rshk
Created: 2012-02-01 18:15:01+00:00
State: open

I just added a middleware class that prevents CSRF validation (by setting it as already checked) in case a valid signed request was found.
All the code is committed in my own django-facebook fork: https://github.com/rshk/django-facebook (I just changed the middleware module and README.md).

Now, I'm not sure what the exact procedure should be in order to integrate with mainstream (if you would like to), since
I'm quite new to the whole git/github thing; should I submit a pull request? How do I do that?

Anyways, the changes I made consist just in an extra middleware class, so you could just copy-paste that.