Security update - Use CSRF token protection for forms, make "remove password" use HTTP Post (#484)

This commit is contained in:
dgtlmoon
2022-03-21 22:54:27 +01:00
committed by GitHub
parent f2fa638480
commit 5483f5d694
12 changed files with 54 additions and 28 deletions

View File

@@ -353,3 +353,5 @@ class globalSettingsForm(commonSettingsForm):
global_subtractive_selectors = StringListField('Remove elements', [ValidateCSSJSONXPATHInput(allow_xpath=False, allow_json=False)])
global_ignore_text = StringListField('Ignore Text', [ValidateListRegex()])
ignore_whitespace = BooleanField('Ignore whitespace')
save_button = SubmitField('Save', render_kw={"class": "pure-button pure-button-primary"})
removepassword_button = SubmitField('Remove password', render_kw={"class": "pure-button pure-button-primary"})