Forbidden (403)

CSRF verification failed. Request aborted.

You are seeing this message because this HTTPS site requires a 'Referer header' to be sent by your Web browser, but none was sent. This header is required for security reasons, to ensure that your browser is not being hijacked by third parties.

If you have configured your browser to disable 'Referer' headers, please re-enable them, at least for this site, or for HTTPS connections, or for 'same-origin' requests.

Help

Reason given for failure:

    escape($reason)?>

In general, this can occur when there is a genuine Cross Site Request Forgery, or when Bjork's CSRF mechanism has not been used correctly. For POST forms, you need to ensure:

The view function uses RequestContext for the template, instead of Context.
In the template, there is a csrf_token template tag inside each POST form that targets an internal URL.

You're seeing the help section of this page because you have DEBUG = true in your Bjork settings file. Change that to false, and only the initial error message will be displayed.

You can customize this page using the CSRF_FAILURE_VIEW setting.