redash/redash/settings
Omer Lachish 5afd0554d0
Add support for CSRF tokens (#5055)
* add flask-wtf

* add CSRF tokens to all static forms

* add CSRF tokens to all axios requests

* disable CSRF validation in unit tests

* support CSRF-protected requests in *most* cypress tests

* don't enfroce CSRF checks by default

* avoid CSRF enforcement in unit tests

* remove redundant spread

* some camel casing hiccups

* always yield the CSRF cookie, but avoid enforcing it if CSRF toggle is off

* Restyled by prettier (#5056)

Co-authored-by: Restyled.io <commits@restyled.io>

* set a CSRF header only if cookie is present

* enforce CSRF in CI

* install lodash directly for Cypress

* install request-cookies directly for Cypress. We should probably start loading package.json deps

* enable CSRF support when logout and login happen within the same spec

Co-authored-by: restyled-io[bot] <32688539+restyled-io[bot]@users.noreply.github.com>
Co-authored-by: Restyled.io <commits@restyled.io>
2020-08-09 15:47:00 +03:00
..
__init__.py Add support for CSRF tokens (#5055) 2020-08-09 15:47:00 +03:00
dynamic_settings.py Load extensions on db init (#5062) 2020-07-23 11:05:20 +03:00
helpers.py Black support for the Python codebase (#4297) 2019-12-11 13:54:29 +02:00
organization.py Added setting to hide Plotly mode bar (#4644) 2020-04-14 13:08:17 +03:00