IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2025-02-25 18:55:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add the Flask-Paranoid module for a little extra, well, paranoia in web mode. Fixes #2584

Browse Source
This commit is contained in:
Murtuza Zabuawala 2017-07-20 18:04:33 +01:00 committed by Dave Page
parent 83ac1f3555
commit 64f3a559ab
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
requirements.txt
View File

@ -41,3 +41,4 @@ sqlparse==0.1.19
Werkzeug==0.9.6 Werkzeug==0.9.6
WTForms==2.0.2 WTForms==2.0.2
backports.csv==1.0.4; python_version <= '2.7' backports.csv==1.0.4; python_version <= '2.7'
Flask-Paranoid==0.1.0

6
web/pgadmin/__init__.py
View File

@ -22,6 +22,7 @@ from flask_security import Security, SQLAlchemyUserDatastore
from flask_mail import Mail from flask_mail import Mail
from flask_security.utils import login_user from flask_security.utils import login_user
from werkzeug.datastructures import ImmutableDict from werkzeug.datastructures import ImmutableDict
from flask_paranoid import Paranoid
from pgadmin.utils import PgAdminModule, driver from pgadmin.utils import PgAdminModule, driver
from pgadmin.utils.versioned_template_loader import VersionedTemplateLoader from pgadmin.utils.versioned_template_loader import VersionedTemplateLoader
@ -285,6 +286,11 @@ def create_app(app_name=None):
app.session_interface = create_session_interface(app) app.session_interface = create_session_interface(app)
# Make the Session more secure against XSS & CSRF when running in web mode
if config.SERVER_MODE:
paranoid = Paranoid(app)
paranoid.redirect_view = 'browser.index'
########################################################################## ##########################################################################
# Load all available server drivers # Load all available server drivers
########################################################################## ##########################################################################