Donald Stufft
2015-02-10 ffe907bd74caf4838ff3414a455b23895d996401
Default to an empty string instead of None
1 files modified
2 ■■■ changed files
pyramid/session.py 2 ●●● patch | view | raw | blame | history
pyramid/session.py
@@ -125,7 +125,7 @@
    .. versionadded:: 1.4a2
    """
    supplied_token = request.params.get(token, request.headers.get(header))
    supplied_token = request.params.get(token, request.headers.get(header, ""))
    if strings_differ(request.session.get_csrf_token(), supplied_token):
        if raises:
            raise BadCSRFToken('check_csrf_token(): Invalid token')