How to disable Django’s CSRF validation?

If you just need some views not to use CSRF, you can use @csrf_exempt:

from django.views.decorators.csrf import csrf_exempt

@csrf_exempt
def my_view(request):
    return HttpResponse('Hello world')

You can find more examples and other scenarios in the Django documentation:

  • https://docs.djangoproject.com/en/dev/ref/csrf/#edge-cases

Leave a Comment