mrlan
/
EnglishPal
4
0
Fork 11
Code Issues Pull Requests 22 Projects Releases Wiki Activity

Bug564-JiangChao #152

Merged
mrlan merged 5 commits from Bug564-JiangChao into Alpha-snapshot20240618 2024-08-26 10:29:26 +08:00
Conversation 1 Commits 5 Files Changed 3
jiangchao commented 2024-07-03 15:26:16 +08:00

admin管理文章界面的删除文章没有二次确认，即点即删。127.0.0.1:5000/admin/article?delete_id=50就直接删除了article_id=50的文章，而且使用的是get请求，可能受到CSRF攻击，不安全。建议增加二次确认，并验证article_id确实存在于数据库中，改成post请求。

admin管理文章界面的删除文章没有二次确认，即点即删。127.0.0.1:5000/admin/article?delete_id=50就直接删除了article_id=50的文章，而且使用的是get请求，可能受到CSRF攻击，不安全。建议增加二次确认，并验证article_id确实存在于数据库中，改成post请求。
jiangchao added 5 commits 2024-07-03 15:26:16 +08:00
mrlan commented 2024-07-30 08:45:01 +08:00
Owner

已经验证

已经验证
mrlan added 1 commit 2024-08-26 10:28:37 +08:00
mrlan merged commit d502b3f474 into Alpha-snapshot20240618 2024-08-26 10:29:26 +08:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: mrlan/EnglishPal#152
There is no content yet.
Delete Branch "Bug564-JiangChao"

Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?