https://startaitools.com/tags/django/Recent content in Django on Start AI Tools - Presented by Intent SolutionsHugoen-USIntent Solutions. All rights reserved.Thu, 29 Oct 2026 08:00:00 -0600https://startaitools.com/posts/referrer-policy-no-referrer-origin-null-csrf-403/Thu, 29 Oct 2026 08:00:00 -0600https://startaitools.com/posts/referrer-policy-no-referrer-origin-null-csrf-403/<p>A strict Referrer-Policy header can make every real visitor&rsquo;s form post fail with a 403 while your test suite stays green. This post covers why that happens, which header value avoids it, and the access-log leak that the safe value opens up.</p> <p>The app is a Django access-request site. It mails each applicant a one-time link, and the link opens a token page where the applicant confirms the request, finishes setup or withdraws. The token sits in the page URL, so the Referer header matters here.</p>