Clarify docstring

This commit is contained in:
Raphael Michel
2017-10-29 00:55:42 +02:00
parent 65116563fd
commit d1971cdcae

View File

@@ -211,6 +211,9 @@ def get_or_create_cart_id(request):
widget (e.g. /orga/event/w/mysecretnonce123/cart/add) that are not already unguessable
(like /orga/event/orders/ABCDE/secret123465456/).
The actual cart IDs for those namespaced carts will then be stored at
request.session['current_cart_event_42_mysecretnonce123'].
However, we still need to work around the issue that we can't use Access-Control-Allow-Credentials
but want to invoke /cart/add via a cross-origin request. This leads to /cart/add creating a new
cart session every time it is invoked cross-origin by default. We solve this by returning the newly