Mercurial > p > roundup > code
view test/__init__.py @ 5210:7da56980754d
Remove csrf keys used with get
The original code didn't delete keys used with a get. Detect this and
invalidate the keys. Get keys are more likely to leak (in urls etc.)
so they have to be removed once used.
Also a little code cleanup and added testing.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 19 Mar 2017 15:32:14 -0400 |
| parents | f63aa57386b0 |
| children |