You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by sb...@apache.org on 2026/03/11 16:57:30 UTC
(tooling-trusted-releases) 03/06: Add audit guidance about empty form CSRF protection
This is an automated email from the ASF dual-hosted git repository.
sbp pushed a commit to branch sbp
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git
commit b69e8055d19b08a7c0fb8dee81c6e2382e75229a
Author: Sean B. Palmer <se...@miscoranda.com>
AuthorDate: Wed Mar 11 15:09:20 2026 +0000
Add audit guidance about empty form CSRF protection
---
atr/form.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/atr/form.py b/atr/form.py
index 4417478b..2ddcca51 100644
--- a/atr/form.py
+++ b/atr/form.py
@@ -54,6 +54,7 @@ class Form(schema.Form):
class Empty(Form):
+ # audit_guidance not really empty, as schema.Form has a mandatory CSRF field
pass
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org