#7026 (Make React CSRF-proof)

by Luc Saffre · in Developers · assigned to Sharif Mehedi

3 semaines, 5 jours ago by Luc Saffre in reply to Sharif Mehedi about #7026 (Make React CSRF-proof) : Well done! (I optimized the code a bit... just because I'm nitpicky...)
3 semaines, 5 jours ago by Sharif Mehedi about #7026 (Make React CSRF-proof) (1 reply) : I added a test case in demotest.py. You may look at the changes, it's quite elaborate.
3 semaines, 5 jours ago by Luc Saffre about #7026 (Make React CSRF-proof) : On Jane and froinde we hat to add the fgollowing line in our settings.py:
CSRF_TRUSTED_ORIGINS = ["https://" + s for s in ALLOWED_HOSTS]
Maybe because we are on a subdomain?
3 semaines, 5 jours ago by Sharif Mehedi about #7026 (Make React CSRF-proof) : I have the test suite green from my side.
Next I will write a test case to check csrf protect.
3 semaines, 6 jours ago by Sharif Mehedi about #7026 (Make React CSRF-proof) : We can consider this ticket closed.
3 semaines, 6 jours ago by Sharif Mehedi about #7026 (Make React CSRF-proof) : I pushed to lino and react repository.
Summary of change in the lino repository is visible in the commit message and is: optimize frontend dependent code
- ApiElement now has a method get_renderer, it defaults to ext_renderer and react and vue gives to it their own renderer through get_renderer - r...
3 semaines, 6 jours ago by Luc Saffre about #7026 (Make React CSRF-proof) : Created new Ticket #7026 (Make React CSRF-proof).