paramecio/paramecio2fm
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

Added csrf token to login

Browse source
This commit is contained in:
absurdo 2023-07-21 17:57:18 +02:00
parent 24b3d40fb6
commit f2948c74ff
3 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
paramecio2/libraries/formsutils.py
View file

@ -3,7 +3,7 @@
from paramecio2.libraries.db import corefields
from paramecio2.libraries.db.coreforms import PasswordForm
from paramecio2.libraries.i18n import I18n
from flask import session
from flask import session, request, abort
from paramecio2.libraries.keyutils import create_key_encrypt
# Need unittest
@ -210,3 +210,11 @@ def generate_csrf():
return session['csrf_token']
def check_csrf(name_csrf_token='csrf_token'):
csrf_token=session.get('csrf_token', '')
if csrf_token=='' or csrf_token!=request.form.get(name_csrf_token):
abort(404)