I am upgrading django version from 4.0 to 4.1, and in the release notes it says:
CsrfViewMiddleware no longer masks the CSRF cookie like it does the CSRF token in the DOM.
And it gives a setting as well called CSRF_COOKIE_MASKED for transition:
The new
CSRF_COOKIE_MASKEDtransitional setting allows specifying whether to mask the CSRF cookie.
My question is how to decide whether to use this CSRF_COOKIE_MASKED setting or not while upgrading to 4.1?
Also, what kind of testing can I do to verify such changes?
New contributor
Gagan is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.