[ https://issues.apache.org/jira/browse/AIRFLOW-836?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15873541#comment-15873541 ]
ASF subversion and git services commented on AIRFLOW-836: --------------------------------------------------------- Commit 6aca2c2d395952341ab1b201c59011920b5a5c77 in incubator-airflow's branch refs/heads/master from [~saguziel] [ https://git-wip-us.apache.org/repos/asf?p=incubator-airflow.git;h=6aca2c2 ] [AIRFLOW-836] Use POST and CSRF for state changing endpoints Closes #2054 from saguziel/aguziel-use-post > The paused and queryview endpoints are vulnerable to CSRF > --------------------------------------------------------- > > Key: AIRFLOW-836 > URL: https://issues.apache.org/jira/browse/AIRFLOW-836 > Project: Apache Airflow > Issue Type: Bug > Reporter: Alex Guziel > Assignee: Alex Guziel > Fix For: 1.9.0 > > > These endpoints use GET and are state-changing which is bad practice, and > allows CSRF -- This message was sent by Atlassian JIRA (v6.3.15#6346)