Re: [Framework-Team] PLIP 224: CSRF protection framework

[Andreas Zeidler]

how about getting the important ones done for 3.1 and perhaps making generic support a PLIP for 3.2?

andi




On Jan 31, 2008, at 9:55 PM, Wichert Akkerman wrote:

ps: thanks wichert for coming up with those two packages so quickly, btw!

A few quick comments:

It is only important for the forms that are security sensitive. That

form. Perhaps a few others, but I think that list is quite complete
already.

Alex suggested the other day that AT itself could use this as well;

few small changes in base_edit.pt and processForm. Personally I'm not
convinced we need to do this everywhere, but since the performance
effect should be very small it won't hurt either.

Wichert.

comes down to personalize_form, the control panel forms and the sharing considering how simple it is to use that should indeed be doable with a

--
zeidler it consulting - http://zitc.de/ - [EMAIL PROTECTED]
friedelstraße 31 - 12047 berlin - telefon +49 30 25563779
pgp key at http://zitc.de/pgp - http://wwwkeys.de.pgp.net/
plone 3.0.5 released! -- http://plone.org/products/plone

PGP.sig
Description: This is a digitally signed message part

_______________________________________________
Framework-Team mailing list
Framework-Team@lists.plone.org
http://lists.plone.org/mailman/listinfo/framework-team