 jvoisin
|
e69c4cd1dc
|
Refactor a bit cps/uploader.py
|
2020-05-11 13:15:30 +02:00 |
|
|
jvoisin
|
dd3b562f1a
|
Change some links from http to https
|
2020-05-09 17:11:56 +02:00 |
|
|
jvoisin
|
30c9aa3df9
|
Minor fixes to caliBlur.js
- Add alt attributes to images
- Fix a broken tag
|
2020-05-09 17:07:22 +02:00 |
|
|
jvoisin
|
688184e255
|
Bump jquery
|
2020-05-09 17:00:03 +02:00 |
|
|
jvoisin
|
264b4b669e
|
Bump underscorejs version from 1.9.1 to 1.12.2
|
2020-05-09 16:54:21 +02:00 |
|
|
jvoisin
|
bf166b757a
|
Improve a bit the cookie's hardening
- Samesite for session cookies as well as the remember me ones
- Httponly
|
2020-05-09 14:42:28 +02:00 |
|
|
jvoisin
|
b4165335a7
|
Use strong sessions protection
See https://flask-login.readthedocs.io/en/latest/#session-protection for
details
|
2020-05-09 14:34:14 +02:00 |
|
|
jvoisin
|
2a1bf2fa71
|
Generate strong random passwords
|
2020-05-09 14:24:20 +02:00 |
|
|
jvoisin
|
523aab2e9e
|
Don't use an hardcoded session key
This fixes a trivial authentication bypass,
according to https://flask.palletsprojects.com/en/1.1.x/quickstart/#sessions
|
2020-04-29 13:59:34 +02:00 |
|
|
jvoisin
|
806a5f209f
|
Fix two minor xss
|
2020-04-29 11:33:33 +02:00 |
|
|
jvoisin
|
487878819e
|
Move a few variables around
This should prevent a couple of crashes
due to undeclared variables.
|
2020-04-27 12:03:54 +02:00 |
|
|
jvoisin
|
d8bf540db2
|
Remove an undeclared and useless local variable
|
2020-04-24 18:04:27 +02:00 |
|