错误是什么意思? :“禁止(推荐人检查失败-没有推荐人.):" [英] What does error mean? : "Forbidden (Referer checking failed - no Referer.):"

问题描述

我有一个正在运行的网站，看来工作正常.但是，现在我已经在第一时间看到了该错误.

I have a website running, which appears to be working fine. Yet, now I've seen this error in the logs for the fist time.

Forbidden (Referer checking failed - no Referer.): /pointlocations/
[pid: 4143|app: 0|req: 148/295] 104.176.70.209 () {48 vars in 1043 bytes} [Wed Jul 26 19:49:35 2017] POST /pointlocations/?participant=A2TYLR23CHRULH&assignmentId=3P4MQ7TPPYF65ANAUBF8A3B38A0BB6 => generated 2737 bytes in 2 msecs (HTTP/1.1 403) 1 headers in 51 bytes (1 switches on core 0)

在发布到/pointlocations/时会发生，但仅针对一个特定的人(每个participant每个帐户都是唯一的，因此我知道它是唯一一个人，反复遇到此问题.超过500多个其他participant具有没有这样的问题/错误.

It happens when posting to /pointlocations/, but only for one specific person ( each participant is unique per account, so I know it's only one person, having this problem repeatedly. Over 500+ other participant have had no such problem/error.

此错误是什么意思，可能是什么原因导致的，我可以解决此问题吗?

What does this error mean, what is likely causing it and can I fix this?

推荐答案

TLDR:尝试使用

TLDR: Try to use the csrf_exempt decorator for your view:

from django.views.decorators.csrf import csrf_exempt

@csrf_exempt
def my_webhook(request):
    # Do some stuffs...

    # Return an HHTPResponse as Django expects a response from the view
    return HttpResponse(status=200)

只有在绝对需要时才应该这样做，以避免潜在的安全漏洞.

更多内容:

在处理第三方调用的网络挂钩时，​​我遇到了类似的问题，这是一种付款解决方案.每次调用付款状态发生变化(例如，从打开"变为已付款")时，第三方都会调用该Web挂钩的Django视图，以通知我们.

I faced a similar problem while working on a web-hook called by a third-party which is a payment solution. The Django view for that web-hook is called by the third-party to notify us every time the payment status changes (goes from 'open' to 'paid' for example).

由于付款平台仅在请求POST中提供付款ID，因此不应执行CSRF检查. Django允许您通过csrf_exempt装饰器执行此操作.

As the payment platform only provides a payment ID in the request POST, the CSRF check should not be performed. Django allows you to do this through the csrf_exempt decorator.

这篇关于错误是什么意思? :“禁止(推荐人检查失败-没有推荐人.):"的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！