Middleware tembolok¶

class UpdateCacheMiddleware[sumber]¶

class FetchFromCacheMiddleware[sumber]¶

Enable the site-wide cache. If these are enabled, each Django-powered page will be cached for as long as the CACHE_MIDDLEWARE_SECONDS setting defines. See the cache documentation.

Middleware "Umum"¶

class CommonMiddleware[sumber]¶

Adds a few conveniences for perfectionists:

• Forbids access to user agents in the DISALLOWED_USER_AGENTS setting, which should be a list of compiled regular expression objects.

• Lakukan penulisan kembali URL pada pengaturan APPEND_SLASH dan PREPEND_WWW.

  Jika APPEND_SLASH adalah True dan URL permulaan tidak berakhir dengan garis miring, dan itu tidak ditemukan dalam URLconf, kemudian URL baru dibentuk dengan menambahkan sebuah garis miring pada akhiran. Jika URL baru ini ditemukan dalam URLconf, kemudian Django mengalihkan permintaan ke URL baru ini. Sebaliknya, URL permulaan diolah seperti biasa.

  For example, foo.com/bar will be redirected to foo.com/bar/ if you don't have a valid URL pattern for foo.com/bar but do have a valid pattern for foo.com/bar/.

  If PREPEND_WWW is True, URLs that lack a leading "www." will be redirected to the same URL with a leading "www."

  Both of these options are meant to normalize URLs. The philosophy is that each URL should exist in one, and only one, place. Technically a URL foo.com/bar is distinct from foo.com/bar/ -- a search-engine indexer would treat them as separate URLs -- so it's best practice to normalize URLs.

• Handles ETags based on the USE_ETAGS setting. If USE_ETAGS is set to True, Django will calculate an ETag for each request by MD5-hashing the page content, and it'll take care of sending Not Modified responses, if appropriate.

• Sets the Content-Length header for non-streaming responses.

CommonMiddleware.response_redirect_class¶

Defaults to HttpResponsePermanentRedirect. Subclass CommonMiddleware and override the attribute to customize the redirects issued by the middleware.

class BrokenLinkEmailsMiddleware[sumber]¶

• Sends broken link notification emails to MANAGERS (see Pelaporan kesalahan).

Middleware GZip¶

class GZipMiddleware[sumber]¶

Compresses content for browsers that understand GZip compression (all modern browsers).

This middleware should be placed before any other middleware that need to read or write the response body so that compression happens afterward.

It will NOT compress content if any of the following are true:

• Isi badan kurang dari panjang 200 byte.
• Tanggapan telah menyetel kepala Content-Encoding.
• The request (the browser) hasn't sent an Accept-Encoding header containing gzip.

If the response has an ETag header, the ETag is made weak to comply with RFC 7232#section-2.1.

You can apply GZip compression to individual views using the gzip_page() decorator.

Conditional GET middleware¶

class ConditionalGetMiddleware[sumber]¶

Handles conditional GET operations. If the response doesn't have an ETag header, the middleware adds one if needed. If the response has a ETag or Last-Modified header, and the request has If-None-Match or If-Modified-Since, the response is replaced by an HttpResponseNotModified.

Middleware lokal¶

class LocaleMiddleware[sumber]¶

Enables language selection based on data from the request. It customizes content for each user. See the internationalization documentation.

LocaleMiddleware.response_redirect_class¶

Defaults to HttpResponseRedirect. Subclass LocaleMiddleware and override the attribute to customize the redirects issued by the middleware.

Middleware pesan¶

class MessageMiddleware[sumber]¶

Enables cookie- and session-based message support. See the messages documentation.

Middleware keamanan¶

class SecurityMiddleware[sumber]¶

The django.middleware.security.SecurityMiddleware provides several security enhancements to the request/response cycle. Each one can be independently enabled or disabled with a setting.

• SECURE_BROWSER_XSS_FILTER
• SECURE_CONTENT_TYPE_NOSNIFF
• SECURE_HSTS_INCLUDE_SUBDOMAINS
• SECURE_HSTS_PRELOAD
• SECURE_HSTS_SECONDS
• SECURE_REDIRECT_EXEMPT
• SECURE_SSL_HOST
• SECURE_SSL_REDIRECT

Middleware sesi¶

class SessionMiddleware[sumber]¶

Mengadakan dukungan sesi. Lihat session documentation.

Situs middleware¶

class CurrentSiteMiddleware[sumber]¶

Adds the site attribute representing the current site to every incoming HttpRequest object. See the sites documentation.

Middleware otentifikasi¶

class AuthenticationMiddleware¶

Adds the user attribute, representing the currently-logged-in user, to every incoming HttpRequest object. See Authentication in Web requests.

class RemoteUserMiddleware¶

Middleware for utilizing Web server provided authentication. See Otentikasi menggunakan REMOTE_USER for usage details.

class PersistentRemoteUserMiddleware¶

Middleware for utilizing Web server provided authentication when enabled only on the login page. See Menggunakan REMOTE_USER hanya pada halaman masuk for usage details.

Middleware perlindungan CSRF¶

class CsrfViewMiddleware[sumber]¶

Adds protection against Cross Site Request Forgeries by adding hidden form fields to POST forms and checking requests for the correct value. See the Cross Site Request Forgery protection documentation.

Middleware X-Frame-Options¶

class XFrameOptionsMiddleware[sumber]¶

Simple clickjacking protection via the X-Frame-Options header.