LoginView missing CSRF protection about django-bananas

[Mojken]

This seems like a severe security issue as well as a one-line fix, how come it remains an ignored issue almost a year later? Should I go ahead and add the decorator as a PR?

[flaeppe]

@Mojken I don't think it's any major issue in general, as long as the site doesn't allow visitors to register themselves for the Django admin site.

Should I go ahead and add the decorator as a PR?

Sure, go ahead if you like!

[Mojken]

I did not realize it was the Django admin login only, that does explain why this wasn't resolved earlier. Still, nice to have this in case somebody accidentally exposes the page or some such.