Diff csrftoken cookie vs csrfmiddlewaretoken in Django?
Answser ref: https://stackoverflow.com/questions/5588374/django-csrftoken-cookie-vs-csrfmiddlewaretoken-html-form-value related CSRF protection (in Django) CSRF Forgeries When a user visits a site, the site should generate a (cryptographically strong) pseudorandom value and set it as a cookie on the user’s machine. The site should require every form submission to include this pseudorandom value as a form value and also as a Cookies value. When a POST request is sent to the site, the request should only be considered valid if the form value and the cookie value are the same....