csrf
Django CSRF problem when uploading a file
I\'m getting the \"CSRF token missing or incorrect\" error whenever I try the following code: def format(request):[详细]
2023-02-14 20:07 分类:问答How to allow my Asp.net MVC 3 web app using MathJax to accept user input $x<y>z$?
I am developing a mathematics site using Asp.Net MVC 3 + Razor + MathJax. MathJax is a javascript library to render TeX or LaTeX codes on the web browser.[详细]
2023-02-14 07:53 分类:问答remote image embeds: how to handle ones that require authentication?
I manage a large and active forum and we\'re being plagued by a very serious problem. We allow users to embed remote images, much like how stackoverflow handles image (imgur) however we don\'t have a[详细]
2023-02-14 00:51 分类:问答Prevent Logout Action from Happening from Untrusted Sources in PHP
I have an action in my site: http://mysite.com/User/Logout This will log the current user out of his/her session. Since this is a simple GET request, a malicious user could either create links to t[详细]
2023-02-13 22:40 分类:问答Django CSRF check failing with an Ajax POST request
I could use some help complying with Django\'s CSRF protection mechanism via my AJAX post. I\'ve followed the directions here:[详细]
2023-02-12 21:19 分类:问答problem with jquery ajax while loading data in django page
why following jquery code doesn\'t work when used with django while it works if loaded like static page?[详细]
2023-02-12 20:41 分类:问答How to prevent XSS injection while allowing users to post external images
A user recently reported to me that they could exploit the BBCode tag [img] that was available to them through the forums.[详细]
2023-02-10 19:56 分类:问答What are the implementation details and rationale of ASP.NET MVC3's AntiForgeryToken?
The AntiForgeryToken is used to prevent CSRF attacks, however the links on MSDN don\'t give me much insight to what exactly the AntiForgeryToken does, or how it works, or why things are done the way t[详细]
2023-02-09 11:09 分类:问答CSRF and Ajax: Do I need protection?
Do I need to use csrf tokens in my ajax requests? I think that someone tricking my users to execute m开发者_开发问答alicious ajax requests from another site, to my site, will fail because of the orig[详细]
2023-02-08 00:05 分类:问答How does AntiForgeryToken work
I\'m in trying to protect from CSRF and have two scenarious: Doing POST from within another site and it fails when I enable AntiForgeryToken[详细]
2023-02-07 13:15 分类:问答