Closed Bug 935172 Opened 12 years ago Closed 11 years ago

Misplaced paranoia in the log

Categories

(Marketplace Graveyard :: Payments/Refunds, defect, P4)

Product:
Marketplace Graveyard
Component:
Payments/Refunds
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: andy+bugzilla, Unassigned)

References

Details

Nov 5 20:06:17 localhost: paranoia:WARNING : Attempt to process form with extra values: ['resource_pk', 'paypal', 'pin_failures', 'pin_is_locked_out', 'resource_uri'] in BuyerForm :/data/sol.prod/www/payments.firefox.com/current/venv/lib/python2.6/site-packages/django_paranoia/reporters/log.py:8 I don't think that's a problem.
Priority: -- → P4
Version: 1.4 → 1.5
Assignee: nobody → amckay
Target Milestone: --- → 2014-01-28
This is because of the tastypie flow. It deserialises the incoming request, then hydrates the whole object and then passes the whole dict through to the form. So the form isn't getting what you'd normally get in a request, the data, it's getting the whole object. Need to think about this one a bit, perhaps DRF is the easier answer here.
Let's move this to DRF and something sensible.
Depends on: 845858
Target Milestone: 2014-01-28 → ---
Assignee: amckay → nobody
Misplaced paranoia is my favorite kind of paranoia.
If this was a problem, security would tell us.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.