Document CSRF protection (for plugins) #827

simonw · 2020-06-09T19:19:10Z

Plugin authors need to know that if they want to POST a form they should include this:

<input type="hidden" name="csrftoken" value="{{ csrftoken() }}">

simonw · 2020-06-09T19:38:30Z

https://datasette.readthedocs.io/en/latest/internals.html#csrf-protection

Refs #395, #519, #576, #699, #706, #774, #777, #781, #784, #788, #790, #797, #798, #800, #802, #804, #819, #822, #825, #826, #827, #828, #829, #830, #833, #836, #837, #839 Closes #806.

simonw added documentation plugins labels Jun 9, 2020

simonw added this to the Datasette 0.44 milestone Jun 9, 2020

simonw closed this as completed in 56eb80a Jun 9, 2020

simonw added a commit that referenced this issue Jun 12, 2020

Release Datasette 0.44

b906030

Refs #395, #519, #576, #699, #706, #774, #777, #781, #784, #788, #790, #797, #798, #800, #802, #804, #819, #822, #825, #826, #827, #828, #829, #830, #833, #836, #837, #839 Closes #806.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Document CSRF protection (for plugins) #827

Document CSRF protection (for plugins) #827

simonw commented Jun 9, 2020 •

edited

Loading

simonw commented Jun 9, 2020

Document CSRF protection (for plugins) #827

Document CSRF protection (for plugins) #827

Comments

simonw commented Jun 9, 2020 • edited Loading

simonw commented Jun 9, 2020

simonw commented Jun 9, 2020 •

edited

Loading