maxcountryman flask-seasurf issues

maxcountryman / flask-seasurf

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

http://readthedocs.org/docs/flask-seasurf/

Other

190 stars 49 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

add SameSite and Secure attribute to cookie

#99 therealadityashankar closed 2 years ago
4
Add a GitHub action to push releases to PyPI

#98 gaborfeher closed 3 years ago
3
Dependabot couldn't authenticate with https://pypi.python.org/simple/

#97 dependabot-preview[bot] closed 4 years ago
0
Prevent unhandled exception from invalid referer hosts

#96 alanhamlett closed 4 years ago
1
Safari Caching Issues

#95 marban closed 4 years ago
0
Way to select session or cookie based tokens?

#94 rkerr opened 4 years ago
0
Drop Python 2.6 and 3.3 support

#93 alanhamlett closed 5 years ago
0
Convert duplicated getCookie methods to helper function

#92 boatx closed 5 years ago
2
Add 'expires' for setting cookie

#91 sooyeon-cho closed 2 years ago
0
Python Code Injection

#90 edmacke closed 5 years ago
10
Add skip_validation decorator to bypass CSRF validation programatically

#89 bjudson closed 5 years ago
0
Fix getCookie implementation in test classes

#88 bjudson closed 5 years ago
1
getCookie methods could use some DRYing out

#87 tansaku closed 5 years ago
1
Tests failing

#86 bjudson closed 5 years ago
1
Change docs URL to avoid redirect

#85 nk9 closed 5 years ago
1
Add skip_validation decorator to bypass CSRF validation programatically

#84 bjudson closed 5 years ago
4
allow to customize the cookie samesite

#83 crazyguitar closed 6 years ago
1
tag 0.2.2 missing in git

#82 ThomasWaldmann closed 6 years ago
2
Added the ability to clear the current CSRF token and generate a new one

#81 NappyPirate closed 5 years ago
0
add manifest file to fix #61

#80 alanhamlett closed 7 years ago
0
feat: use PEP 506 secrets module if available

#79 simon04 closed 7 years ago
1
feat: allow to customize the cookie path

#78 simon04 closed 7 years ago
1
docs: link to owasp for CSRF explanation

#77 simon04 closed 7 years ago
0
docs: fix typo

#76 simon04 closed 7 years ago
0
Updated Pypi release

#75 jasco closed 3 years ago
10
CORS and CSRF

#74 pts-davidpark closed 5 years ago
2
why not every request generate a csrf token

#73 willhope closed 7 years ago
2
Nitpicky markdown formatting fix for headers in the readme.

#72 Tethik closed 7 years ago
0
Send Set-Cookie header(much) less often to reduce breaking cache

#71 jesseops closed 7 years ago
4
Ability to disable CSRF for OAuth requests

#70 alanhamlett closed 7 years ago
0
flask.ext namespace is depreciated

#69 alanhamlett closed 7 years ago
0
Updated docs to mention about TESTING mode

#68 ninadmhatre closed 7 years ago
0
Updating documentation for specifying TESTING=True disabled token generation

#67 ninadmhatre closed 7 years ago
1
Flask-WTForms example doesn't make sense

#66 kkinder closed 6 years ago
2
Except json.get error for JSON list data

#65 SkylerWilliams closed 7 years ago
1
_before_request JSON read issue

#64 SkylerWilliams closed 7 years ago
0
add configuration option for sha256 in HMAC

#63 unuseless opened 7 years ago
1
Added Python 3 classifier to setup.py

#62 monostop closed 8 years ago
1
Add MANIFEST.in with link to LICENSE

#61 pmlandwehr closed 7 years ago
1
improve test coverage and prevent hijacking requests with invalid json

#60 alanhamlett closed 8 years ago
1
prevent Jinja2 from displaying csrf_token() output wrapped with b''

#59 alanhamlett closed 8 years ago
0
Is this really safe with cookie-based session?

#58 zhaoxin closed 6 years ago
2
option to disable Referer check

#57 alanhamlett closed 8 years ago
1
better error exception descriptions

#56 alanhamlett closed 8 years ago
1
Ability to provide custom error pages for CSRF errors

#55 alanhamlett closed 8 years ago
0
Fix problems with unicode URLs

#54 thomasst closed 8 years ago
1
Don't write session unless it's modified

#53 thomasst closed 8 years ago
3
add optional CSRF_COOKIE_DOMAIN setting

#52 ghost closed 8 years ago
0
Configuring domain unsupported

#51 ghost closed 8 years ago
0
Disable CSRF protection in all views by default

#50 Alexmod closed 8 years ago
2

Previous Next