diff --git a/python/django/security/django-no-csrf-token.yaml b/python/django/security/django-no-csrf-token.yaml
index e5b115e4a9..7fd1694d5a 100644
--- a/python/django/security/django-no-csrf-token.yaml
+++ b/python/django/security/django-no-csrf-token.yaml
@@ -2,6 +2,16 @@ rules:
- id: django-no-csrf-token
patterns:
- pattern: "..."
+ - pattern-either:
+ - pattern: |
+
+ - pattern: |
+
+ - pattern: |
+
+ - metavariable-regex:
+ metavariable: $METHOD
+ regex: (?i)post
- pattern-not-inside: "...{% csrf_token %}..."
message: Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks
languages: [generic]
diff --git a/scripts/run-tests b/scripts/run-tests
index 0a83e63a59..05fc9be54f 100755
--- a/scripts/run-tests
+++ b/scripts/run-tests
@@ -40,12 +40,12 @@ fi
# may contain .yml files that are not Semgrep rules and would result
# in errors.
#
-# Skipping the "Apex" folder because it will require splitting test logic
+# Skipping the "Apex" and "Elixir" folders because it will require splitting test logic
# to run Semgrep OSS and Semgrep Pro with different expected results.
#
set_rule_folders() {
rule_folders=$(find . -mindepth 1 -maxdepth 1 -type d \
- | grep -v '^./\(\..*\|stats\|trusted_python\|fingerprints\|scripts\|libsonnet\|apex\)/\?$' \
+ | grep -v '^./\(\..*\|stats\|trusted_python\|fingerprints\|scripts\|libsonnet\|apex\|elixir\)/\?$' \
| sort)
if [[ -z "$rule_folders" ]]; then
error "Cannot find any rule folders to scan in $(pwd)"