Page MenuHomeSoftware Heritage

Improve security on web form
Closed, MigratedEdits Locked

Description

The web-ui proposes some forms to submit data through post requests (web part).
Those are security sensitive http://flask.pocoo.org/docs/0.10/security/.

csrf example: http://flask.pocoo.org/snippets/3/

Event Timeline

zack claimed this task.
zack edited subscribers, added: zack; removed: ardumont.

CSRF shouldn't be an issue for us (at least for now), since we don't have authenticated users (yet)

olasd changed the visibility from "All Users" to "Public (No Login Required)".May 13 2016, 5:09 PM