zetaops / zengine

BPMN workflow based framework with Tornado, Rabbit AMQP, advanced permissions, extensible scaffolding features and more
GNU General Public License v3.0
83 stars 22 forks source link

FormValidation against tampering of form fields #5355 #62

Closed zetaopsbot closed 8 years ago

zetaopsbot commented 8 years ago

We need a form validation mechanism to ensure that the generated form (fields) is not tampered in any way and returned back as is. To accomplish this, I'm going to cache some form details and store the cache key in a hidden field of form (actually in the "model" dict of JsonForm output) Then compare incoming keys with cached ones and raise a FormValidationException if they not match

zengine