pagure

#1523 Correctly implement dropping the time constraint on CSRF tokens
Merged by pingou. Opened by pingou.
fix_csrf_behavior  into  master

Download 1523.patch

Fixes https://pagure.io/pagure/issue/1333

The code is a little bit messy but has been tested with flask-wtf 0.8 and 0.10 and wtforms 2.0. The unit-tests added should help us supporting the newer releases of both libraries.

Do you really need to split and reassemble? As the _ should be a blank string, this shouldn't be changing anything...

One remark, otherwise +1.

true, that's no longer needed but in a way it makes things explicit (especially with the changed one above)

Fair enough.

+1

Thanks :)

Pull-Request has been merged by pingou
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.