1. 18 Sep, 2016 4 commits
  2. 17 Sep, 2016 1 commit
  3. 15 Sep, 2016 1 commit
  4. 14 Sep, 2016 1 commit
    • Andrew Grigorev's avatar
      Fix CSRF for production deployments · db21a600
      Andrew Grigorev authored
      Current SecureForm implementation generates CSRF secret using
      `os.urandom()` every time when application start up. CSRF secret is used
      to calculate csrf_token check value, so if someone would use a command
      similar to
      
          gunicorn --workers=8 app
      
      to run his flask-admin app on production then most form submissions
      would silently fail (silently - as for now, it is probably another one
      bug).
      
      Instead of custom `os.urandom()` logic the `app.secret_key` value should
      be used to produce CSRF token values.
      db21a600
  5. 08 Sep, 2016 4 commits
  6. 05 Sep, 2016 3 commits
  7. 03 Sep, 2016 2 commits
  8. 31 Aug, 2016 2 commits
  9. 30 Aug, 2016 1 commit
  10. 28 Aug, 2016 1 commit
  11. 25 Aug, 2016 7 commits
  12. 16 Aug, 2016 1 commit
  13. 28 Jul, 2016 1 commit
  14. 26 Jul, 2016 1 commit
  15. 21 Jul, 2016 3 commits
  16. 17 Jul, 2016 3 commits
  17. 16 Jul, 2016 4 commits