Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

I421backport #425

Merged
merged 2 commits into from Jan 8, 2021
Merged

I421backport #425

merged 2 commits into from Jan 8, 2021

Conversation

jwag956
Copy link
Member

@jwag956 jwag956 commented Jan 5, 2021

No description provided.

@jwag956
Fix security vuln - GET on /login or /change could reveal authenticat…
6d50ee9 
…ion token with no CSRF checks. (#422)

GETs no longer return the auth token.

closes: #421
@jwag956
Backport CSRF /login vulnerability.
df47499 
This will go out at 3.4.5

aargg - issues with black, and other packages w.r.t  py2.7
@jwag956 jwag956 merged commit 61d3131 into 3.4.x Jan 8, 2021
@jwag956 jwag956 deleted the i421backport branch January 8, 2021 04:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@jwag956