Closed Bug 720441 Opened 13 years ago Closed 13 years ago

Contributions csrf exempt

Categories

(addons.mozilla.org Graveyard :: Code Quality, defect)

Product:
addons.mozilla.org Graveyard
Component:
Code Quality
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: andy+bugzilla, Assigned: cvan)

Details

I had to mark anonymous contributions csrf exempt to get in a quick fix for bug 720406. I don't like that, I'd like have CSRF in there, but clearly there is more to this for anonymous users.
https://github.com/mozilla/zamboni/commit/0bbef85
Assignee: nobody → cvan
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: Q1 2012 → 6.3.9
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.