mirror of
https://github.com/pgadmin-org/pgadmin4.git
synced 2025-02-25 18:55:31 -06:00
45f2e35a99
Currently supported objects are Table, View, Materialized View, Function and Procedure. Backend comparison of two schemas implemented by: Akshay Joshi Fixes #3452.
46 lines
1.5 KiB
Python
46 lines
1.5 KiB
Python
##########################################################################
|
|
#
|
|
# pgAdmin 4 - PostgreSQL Tools
|
|
#
|
|
# Copyright (C) 2013 - 2020, The pgAdmin Development Team
|
|
# This software is released under the PostgreSQL Licence
|
|
#
|
|
#########################################################################
|
|
|
|
from flask_wtf.csrf import CSRFProtect
|
|
from flask import request, current_app
|
|
|
|
|
|
class _PGCSRFProtect(CSRFProtect):
|
|
def __init__(self, *args, **kwargs):
|
|
super(_PGCSRFProtect, self).__init__(*args, **kwargs)
|
|
|
|
def init_app(self, app):
|
|
res = super(_PGCSRFProtect, self).init_app(app)
|
|
self._pg_csrf_exempt(app)
|
|
|
|
def _pg_csrf_exempt(self, app):
|
|
"""Exempt some of the Views/blueprints from CSRF protection
|
|
"""
|
|
|
|
exempt_views = [
|
|
'flask.helpers.send_static_file',
|
|
'flask_security.views.login',
|
|
'flask_security.views.logout',
|
|
'pgadmin.tools.translations',
|
|
app.blueprints['redirects'],
|
|
'pgadmin.browser.server_groups.servers.supported_servers-js',
|
|
'pgadmin.tools.datagrid.initialize_query_tool',
|
|
'pgadmin.tools.datagrid.panel',
|
|
'pgadmin.tools.debugger.initialize_target',
|
|
'pgadmin.tools.debugger.direct_new',
|
|
'pgadmin.tools.schema_diff.panel',
|
|
'pgadmin.tools.schema_diff.ddl_compare',
|
|
]
|
|
|
|
for exempt in exempt_views:
|
|
self.exempt(exempt)
|
|
|
|
|
|
pgCSRFProtect = _PGCSRFProtect()
|