mozilla/kuma — pull request #90 by lmorchard (2012-01-18 20:04:28+00:00)
Title: Bug 715723 - Make the BrowserID verification form exempt form CSRF protection

Quick 2-line change to make the browserid verification form exempt from CSRF enforcement. Still thinking about tests, but might not need any.

Can't quite figure out how to stop the CSRF token from being added to the form, since I think some middleware is doing that. And, I think the middleware is configured by the whole request and not by individual form.

Either way, this change should enable browserid forms posted from the Deki skin to be accepted