Mercurial > p > roundup > code
comparison roundup/configuration.py @ 8042:9ba60ddafd2a
fix: remove duplicate config option.
Had the same config setting twice in the structure.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Tue, 25 Jun 2024 12:06:06 -0400 |
| parents | 791b61ed11c9 |
| children | 69629a4f7262 |
comparison
equal
deleted
inserted
replaced
| 8041:704757c71b84 | 8042:9ba60ddafd2a |
|---|---|
| 1329 """), | 1329 """), |
| 1330 (IntegerNumberGeqZeroOption, 'csrf_token_lifetime', "20160", | 1330 (IntegerNumberGeqZeroOption, 'csrf_token_lifetime', "20160", |
| 1331 """csrf_tokens have a limited lifetime. If they are not | 1331 """csrf_tokens have a limited lifetime. If they are not |
| 1332 used they are purged from the database after this | 1332 used they are purged from the database after this |
| 1333 number of minutes. Default (20160) is 2 weeks."""), | 1333 number of minutes. Default (20160) is 2 weeks."""), |
| 1334 (CsrfSettingOption, 'csrf_enforce_token', "yes", | |
| 1335 """How do we deal with @csrf fields in posted forms. | |
| 1336 Set this to 'required' to block the post and notify | |
| 1337 the user if the field is missing or invalid. | |
| 1338 Set this to 'yes' to block the post and notify the user | |
| 1339 if the token is invalid, but accept the form if | |
| 1340 the field is missing. | |
| 1341 Set this to 'logfailure' to log a notice to the roundup | |
| 1342 log if the field is invalid or missing, but accept | |
| 1343 the post. | |
| 1344 Set this to 'no' to ignore the field and accept the post. | |
| 1345 """), | |
| 1346 (CsrfSettingOption, 'csrf_enforce_header_X-REQUESTED-WITH', "yes", | 1334 (CsrfSettingOption, 'csrf_enforce_header_X-REQUESTED-WITH', "yes", |
| 1347 """This is only used for xmlrpc and rest requests. This test is | 1335 """This is only used for xmlrpc and rest requests. This test is |
| 1348 done after Origin and Referer headers are checked. It only | 1336 done after Origin and Referer headers are checked. It only |
| 1349 verifies that the X-Requested-With header exists. The value | 1337 verifies that the X-Requested-With header exists. The value |
| 1350 is ignored. | 1338 is ignored. |