github.com/mozilla/django-session-csrf issues

CSRF token missing or incorrect

sandeepks230 opened this issue over 2 years ago

Add Mozilla Code of Conduct

Mozilla-GitHub-Standards opened this pull request almost 6 years ago

CODE_OF_CONDUCT.md file missing

Mozilla-GitHub-Standards opened this issue almost 6 years ago

Update README with Django=>1.8 settings

moggers87 opened this issue over 7 years ago

Add a note about Django's CSRF_USE_SESSIONS

glogiotatidis opened this pull request over 7 years ago

Arbitrary session fixation

kravietz opened this issue over 7 years ago

Test against latest Django versions

moggers87 opened this pull request over 7 years ago

Error in Django 1.10.5 - previously working

tulpn opened this issue almost 8 years ago

Form Submission after Errors throws CSRF Forbidden

tulpn opened this issue about 8 years ago

Automatic pypi release on tags

peterbe opened this issue over 8 years ago

Add changelog

jezdez opened this issue over 8 years ago

Push git tags for 0.6 and 0.7

jezdez opened this issue over 8 years ago

Python 3 support

moggers87 opened this pull request over 8 years ago

don't require django to install

peterbe opened this pull request over 8 years ago

don't assume request.user

peterbe opened this pull request over 8 years ago

ignore build artifacts

peterbe opened this pull request over 8 years ago

Prevent repetitive output to counter BREACH-type attacks

glogiotatidis opened this issue over 8 years ago

AttributeError: 'module' object has no attribute '_get_new_csrf_key

phoenisx opened this issue over 8 years ago

Make compatible with Django 1.10

pcraston opened this pull request over 8 years ago

Django 1.10 Changes

bjinwright opened this pull request over 8 years ago

monkeypatch django get_token

chargreezy opened this pull request over 8 years ago

monkeypatch django get_token

chargreezy opened this pull request over 8 years ago

Make it slightly more obvious what `ANON_ALWAYS` is for

moggers87 opened this pull request almost 9 years ago

tests compatible with django 1.7

peterbe opened this pull request almost 9 years ago

added domain kwarg to set_cookie function

ryechus opened this pull request about 9 years ago

Check if user object is set before calling is_authenticated on it.

owad opened this pull request over 9 years ago

Check if user object is set before calling is_authenticated on it.

owad opened this pull request over 9 years ago

Option to use normal sessions for anonymous users

moggers87 opened this pull request over 9 years ago

Python 3 support

moggers87 opened this issue over 9 years ago

Fixed tests & Travis

moggers87 opened this pull request over 9 years ago

Add contribute.json file.

Osmose opened this pull request almost 10 years ago

Remove `django` from `install_requires`

stucox opened this pull request almost 10 years ago

Check for existence of request.user before calling is_authenticated()

eressler opened this pull request almost 11 years ago

hash csrf tokens for use as memcache keys

washort opened this pull request over 11 years ago

issue 10 - massive cookies cause memcache trouble

peterbe opened this pull request about 12 years ago

The test `test_anon_token_from_cookie` is breaking

peterbe opened this issue about 12 years ago

session_csrf accesses POST on non-POST requests, which breaks piston

scjody opened this issue over 12 years ago

Anonymous CSRF cookie fix, test fixes, and ANON_ALWAYS cleanup

scjody opened this pull request over 12 years ago

MemcachedKeyLengthError with a long anoncsrf cookie

rik opened this issue over 12 years ago

Don't recommend putting important code in manage.py.

carljm opened this pull request almost 13 years ago

allow running of TestCsrfMiddleware tests in isolation

anentropic opened this pull request almost 13 years ago

fix broken tests

anentropic opened this pull request almost 13 years ago

Added .gitignore file with some rules

LucianU opened this pull request about 13 years ago

Enhancements and bugfixes to session-csrf

scjody opened this pull request about 13 years ago

@csrf_protect should apply @anonymous_csrf automatically

trustcentric opened this issue over 13 years ago

Only POST is blacklisted. Should use a whitelist for HTTP methods.

trustcentric opened this issue over 13 years ago

cache required

davedash opened this issue over 13 years ago

Internal server error

AGRaud opened this issue over 13 years ago

Ecosyste.ms: OpenCollective

github.com/mozilla/django-session-csrf