tlamatini-csrf-exempt-audit

To audit Django views for unnecessary csrf_exempt decorators, enumerate every decorated view in views.py, inspect surrounding code to classify risk, and propose minimal mitigations. This generates a structured report with total counts, classifications, and recommendations.

A csrf_exempt security audit detects and classifies csrf_exempt usage across Django views to determine if each exemption is truly necessary. It helps reduce security risks by identifying unsafe exemptions and proposing concrete fixes for them.

Finding and classifying all @csrf_exempt usage involves scanning the codebase to enumerate decorated views and inspecting each view to determine its risk category. The process outputs a structured result containing total counts, classifications, and recommendations.

Yes, you can automatically generate mitigation recommendations for unsafe CSRF exemptions by inspecting the surrounding view logic to determine the risk category. The audit proposes minimal, concrete fixes for unsafe exemptions in a structured report.

Yes, this CSRF audit outputs structured data suitable for automated validation. It returns a structured result containing total counts of exemptions, classifications of each view, and actionable recommendations for security fixes.

You should run a CSRF exemption audit when reducing security risks in web applications that use Django. It inspects views.py to detect and classify csrf_exempt usage, ensuring each exemption is truly necessary and proposing fixes for unsafe ones.