rDrama/files
justcool393 1ae3dc85c2
Fix: Redirect loop on formkey or nonce mismatch.
* fix 401-302-401-302-429 loop

* don't logout users on bad form key, just treat the request as unauthenticated

* Handle None/empty case in validate_formkey.

A supplied empty formkey, or the lack of a supplied formkey (None) is not a valid formkey. Handle this inside the function rather than at the call-site.

* Validate as false if no hashstr or string

Co-authored-by: Snakes <104547575+TLSM@users.noreply.github.com>
2022-12-17 11:20:27 -06:00
..
assets Solve blocking weaponization. 2022-12-17 11:11:51 -06:00
classes Fix: Redirect loop on formkey or nonce mismatch. 2022-12-17 11:20:27 -06:00
commands [#72] Add seed_db command 2022-06-09 01:33:58 -07:00
helpers Fix: Redirect loop on formkey or nonce mismatch. 2022-12-17 11:20:27 -06:00
mail Split SITE_NAME into computer-readable SITE_ID and human-readable SITE_TITLE. 2022-07-31 18:53:18 -05:00
routes Solve blocking weaponization. 2022-12-17 11:11:51 -06:00
templates Solve blocking weaponization. 2022-12-17 11:11:51 -06:00
tests remove .pyc files 2022-10-27 21:54:07 -05:00
__init__.py Initial e2e testing 2022-05-13 02:55:29 -05:00
__main__.py Fix: Volunteer config not parsed properly. 2022-12-05 00:49:34 -08:00
cli.py [#72] Ensure seed_db command is actually imported when calling into flask 2022-06-09 01:34:46 -07:00