views.py 文件源码

def check_referer(request):
    referer = request.META.get('HTTP_REFERER', None)
    debug = settings.DEBUG

    if not debug and referer is None:
        raise PermissionDenied()

    if not debug and not urlparse(referer).netloc in settings.ALLOWED_HOSTS and not settings.ALLOWED_HOSTS[0] == '*':
        raise PermissionDenied()