3 ms·
sorry, I think in terms of Rails, in rails a session is a _site_sess cookie... i am not sure how it works in Django but what here is a post about it http://homa
by homakov 13y ago
sorry, I think in terms of Rails, in rails a session is a _site_sess cookie... i am not sure how it works in Django but what here is a post about it http://homakov.blogspot.com/2013/06/cookie-forcing-protection-made-easy.html http://homakov.blogspot.com/2013/06/cookie-forcing-protectio...
https://github.com/mozilla/django-session-csrf https://github.com/mozilla/django-session-csrf seems ok, should be default
- JshWright 13y ago"i am not sure how it works in Django" Perhaps you should do a little research before proclaiming things insecure?
- homakov 13y agobitbucket is vulnerable > django has a problem if it's not enough: some websites from http://www.djangosites.org/ http://www.djangosites.org/ are vulnerable > django has a problem