diff options
| author | Marjo Murtomäki <mmurtoma@local> | 2023-11-27 19:56:22 +0200 |
|---|---|---|
| committer | Marjo Murtomäki <mmurtoma@local> | 2023-11-27 19:56:22 +0200 |
| commit | c618290a4476fd01f46b079e8b95bbc16341cbca (patch) | |
| tree | 9b74d598584d25b7b032d53da919d3338d0eb191 /routes/base.py | |
| parent | f965d5d1f799037cd49accae9256ed42b8c17ccb (diff) | |
Adding csrf checking to every post handler.
Diffstat (limited to 'routes/base.py')
| -rw-r--r-- | routes/base.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/routes/base.py b/routes/base.py index 22245c5..6d6dcd8 100644 --- a/routes/base.py +++ b/routes/base.py @@ -25,6 +25,7 @@ def info(): @app.route("/set/nick",methods=["POST"]) def new_nick(): next = "/#"+request.form["caller"] if "caller" in request.form else "/" + csrf_check(next) if "id" in session.keys(): session["alert"]="Sinulla on jo nimimerkki. Käytä sitä." return redirect(next) |