Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Protect against CSRF attacks #135

Closed
MrKrisKrisu opened this issue Oct 5, 2020 · 0 comments · Fixed by #214
Closed

Protect against CSRF attacks #135

MrKrisKrisu opened this issue Oct 5, 2020 · 0 comments · Fixed by #214
Labels
bug Something isn't working
Projects
Frontend

Comments

@MrKrisKrisu
Copy link
Member

Some routes carry out actions without having checked whether the user really wants to carry them out. A CSRF protection should be used. In addition, the routes from GET to POST
(or PUT, DELETE, ...) change.

Affected e.g.

  • GET: /settings/deltoken/{id}
  • GET: /settings/delsession
@MrKrisKrisu MrKrisKrisu created this issue from a note in Backend (To do) Oct 5, 2020
@MrKrisKrisu MrKrisKrisu removed this from To do in Backend Oct 5, 2020
@MrKrisKrisu MrKrisKrisu added this to To do in Frontend via automation Oct 5, 2020
@MrKrisKrisu MrKrisKrisu added bug Something isn't working To Do labels Oct 5, 2020
MrKrisKrisu added a commit that referenced this issue Feb 14, 2021
@MrKrisKrisu
Added CSRF Protection to routes
c6ea1e2 
closes #135
@MrKrisKrisu MrKrisKrisu mentioned this issue Feb 14, 2021
Merged
Frontend automation moved this from To do to Done Feb 15, 2021
HerrLevin pushed a commit that referenced this issue Feb 15, 2021
@MrKrisKrisu
Added CSRF Protection to routes (#214)
1a68505 
closes #135
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
No open projects
Frontend
  
Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

🚑 Added CSRF Protection to routes Traewelling/traewelling
1 participant
@MrKrisKrisu