4 ms·

Nice, I was thinking of implementing something like this myself as I hate retweeing reps' emails. Just one suggestion - why do you need to confirm every action

by kolev 11y ago

Nice, I was thinking of implementing something like this myself as I hate retweeing reps' emails. Just one suggestion - why do you need to confirm every action including non-destructive like logging out?

Mizza 11y ago
Accounts stuff is provided by an upstream package, django-allauth. Confirm on logout is handy so you can't trick a user into GETing a log out page, it has to be POSTed.
- kolev 11y ago
  Well, that's what nonces are for though.