#7026 Require POST for follow/unfollow actions

v1.1.0
closed
Cory Johns
activitystreams (47) security (36) sf-1 (616)
General
Dave Brondsema
2015-08-20
2014-01-06
Dave Brondsema
No

def follow in forgeactivity/main.py should require POST. And templates and tests should be changed to send posts (and don't forget the csrf token).

Discussion

  • Dave Brondsema

    Dave Brondsema - 2014-01-10
    • Size: --> 1
     

  • Dave Brondsema

    Dave Brondsema - 2014-01-10
    • Milestone: forge-backlog --> forge-jan-24
     

  • Cory Johns - 2014-01-13
    • status: open --> in-progress
    • assigned_to: Cory Johns
     

  • Cory Johns - 2014-01-13
    • status: in-progress --> code-review
     

  • Cory Johns - 2014-01-13

    allura:cj/7026
    sfpy:cj/7026

     

  • Dave Brondsema

    Dave Brondsema - 2014-01-15
    • QA: Dave Brondsema
     

  • Dave Brondsema

    Dave Brondsema - 2014-01-15
    • status: code-review --> in-progress
     

  • Dave Brondsema

    Dave Brondsema - 2014-01-15

    The self.project and artifact.project changes should be split off into their own commit

     

  • Dave Brondsema

    Dave Brondsema - 2014-01-15
    • status: in-progress --> closed
     

Log in to post a comment.