Closed Bug 572880 Opened 14 years ago Closed 13 years ago

forums.views.reply() should require POST method

Categories

(support.mozilla.org :: Forum, task, P4)

Product:
support.mozilla.org
Component:
Forum
Type:
task

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: erik, Assigned: tgavankar)

References

Details

Shouldn't forums.views.reply be decorated @require_POST? I don't think we ever throw GETs at it, and similar views like lock_thread() are @require_POST.

Note that it isn't hurting anything at present; it falls back to returning a list of posts, with a form error, on GET.
Target Milestone: --- → 2011Q2
Assignee: nobody → tgavankar
Fixed and added a test at https://github.com/jsocol/kitsune/commit/5f4b53d6
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: 2011Q2 → 2.9
Please add STR- I'm unsure how to verify this.  After reading the related bug I tried this link: https://support-release.allizom.org/fr/questions/775683/reply
But it did not redirect.
It shouldn't redirect, it should return HTTP 405
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.