[Taler] WebEx wallet can't POST on Django site

[Marcello Stanisci]

Hi Folks,

The WX wallet shows the following problem when trying to withdraw
coins from the experimental Django bank's website.

As it should be clear, the first step to withdraw coins is to trigger
the script, on the bank's web server, that fakes out the wire transfer
to the mint.

That should be done by POSTing data from the client to a script which is
managed by Django.

Normally, that POST is simply performed by a form residing in the bank's
homepage; the WX wallet instead uses that form just to fetch data and not
to actually POST from it. The actual POST (in the WX case) is made by an
internal-to-the-wallet page called 'background' page, and the CSRF
prevention makes Django return a '403 Forbidden'.

How to deal with that?

PS: the payment already suffered from something similar

Marcello

signature.asc
Description: Digital signature