Skip to content

Conversation

@MyIgel
Copy link
Member

@MyIgel MyIgel commented Nov 20, 2018

Some (older) fixes for potential csrf problems that I had laying around for a while and a bigger change to require POST for forms

  • Added additional headers to the response
  • Implemented a csrf token
  • Changed forms to validate that they are send as POST

* Ensure that the form is submitted with a post request
* Replaced several links with forms

Closes engelsystem#494 (Security Vulnerability)
@MyIgel MyIgel added Type: Bug(fix) A bug or a fix for a bug. Type: Refactor Make the code better. labels Nov 20, 2018
@MyIgel MyIgel added this to the 35c3 milestone Nov 20, 2018
@msquare msquare merged commit 944c29b into engelsystem:master Nov 21, 2018
@MyIgel MyIgel deleted the csrf branch November 21, 2018 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Bug(fix) A bug or a fix for a bug. Type: Refactor Make the code better.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants