search

glondu / belenios

Verifiable online voting system. This is a mirror of https://gitlab.inria.fr/belenios/belenios
https://www.belenios.org
GNU Affero General Public License v3.0
133 stars 21 forks source link

No authentication required to access "Prepare a new election" page #44

Closed albanbruder closed 3 years ago

albanbruder commented 3 years ago

See: https://belenios.loria.fr/draft/new

Even though this shouldn't be a security problem (because form submission is authenticated), it might be more clear to handle this page like /admin or by redirecting to /login and after successful authentication redirecting back to /draft/new.