GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

This commit is contained in:
dgtlmoon
2026-08-20 10:59:38 +02:00
parent acc4533f51
commit 89a41c0dda
72 changed files with 407 additions and 358 deletions
@@ -535,7 +535,7 @@ def test_tag_delete_removes_from_watches(client, live_server):
# watch3 has no tags
# Delete the tag
response = client.get(url_for("tags.delete", uuid=tag_uuid))
response = client.post(url_for("tags.delete", uuid=tag_uuid))
assert response.status_code == 302
# Wait for background thread to complete