1. 14 Sep, 2016 1 commit
    • Andrew Grigorev's avatar
      Fix CSRF for production deployments · db21a600
      Andrew Grigorev authored
      Current SecureForm implementation generates CSRF secret using
      `os.urandom()` every time when application start up. CSRF secret is used
      to calculate csrf_token check value, so if someone would use a command
      similar to
      
          gunicorn --workers=8 app
      
      to run his flask-admin app on production then most form submissions
      would silently fail (silently - as for now, it is probably another one
      bug).
      
      Instead of custom `os.urandom()` logic the `app.secret_key` value should
      be used to produce CSRF token values.
      db21a600
  2. 08 Sep, 2016 4 commits
  3. 05 Sep, 2016 3 commits
  4. 03 Sep, 2016 2 commits
  5. 31 Aug, 2016 2 commits
  6. 30 Aug, 2016 1 commit
  7. 28 Aug, 2016 1 commit
  8. 25 Aug, 2016 7 commits
  9. 16 Aug, 2016 1 commit
  10. 28 Jul, 2016 1 commit
  11. 26 Jul, 2016 1 commit
  12. 21 Jul, 2016 3 commits
  13. 17 Jul, 2016 3 commits
  14. 16 Jul, 2016 5 commits
  15. 15 Jul, 2016 4 commits
  16. 16 Jun, 2016 1 commit