"
To: django-developers@googlegroups.com
Sent: Thursday, 6 December, 2012 11:06:38 PM
Subject: Re: Thank you to our security aware developers
So, I don't understand one thing. If it's checking the validity on the
backend of a hidden field in the frontend, that should mean that the
ged one of
> the IDs in the hidden field to point to a different parent, and submitted.
> I got: "The inline foreign key did not match the parent instance primary
> key."
>
> Woot! Very good. Thank you, guys!
>
> The only nit I'd have about this is that (I th
nything that's in
> the hands of the end-user should never be trusted.
>
> So, I faked up a page that had all the proper stuff, but changed one of
> the IDs in the hidden field to point to a different parent, and submitted.
> I got: "The inline foreign key did not match the
The inline foreign key did not match the parent instance primary key."
Woot! Very good. Thank you, guys!
The only nit I'd have about this is that (I think) this error message
should never occur, and if it does, something is wrong that is outside the
hands of a (normal) end-user. Something
This is the first framework I'm using that doesn't make me feel the
urge to hack the framework's code in order to get something done. It
just feels natural to extend stuff in the intended way. It took me ten
days to learn the basics and build ~80% of a moderately complex
project management system.
