Django view without LoginRequiredMixin

What it detects

Django view without LoginRequiredMixin: an authentication check run by the semgrep analyzer.

Evidence

The Semgrep source location, rule identity, and bounded match context normalized into Fendix evidence.

Remediation

Django view does not use LoginRequiredMixin. Add LoginRequiredMixin as the leftmost base class, or apply login_required with method_decorator(login_required, name="dispatch") on the view class or login_required(View.as_view()) in the URLconf, to protect this view.

Limitations

This check is limited to the applicability and evidence delivered by semgrep. Review the evidence in context; a match is a finding input, while confidence and policy determine its disposition.

Related reference

Analyzer Registry · Findings and release decisions · Policy and confidence

Remediation guidance: Remediation and fix verification · Baselines and suppressions