Home | Trees | Indices | Help |
|
---|
|
object --+ | CSRFFilter
Cross Site Request Forgery protection filter
Inserts a shared secret hidden variable into all non GET-forms. CSRF attacks can be detected by validating this shared secret when non-GET forms are submitted.
>>> from genshi.input import HTML >>> stream = HTML('<form method="post"/>') >>> stream = stream | CSRFFilter('shared_secret') >>> stream.render() '<form method="post"><input type="hidden" name="_form_token" value="shared_secret"/></form>'
Instance Methods | |||
|
|||
|
|||
Inherited from |
Properties | |
Inherited from |
Method Details |
|
Home | Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0beta1 on Mon Oct 1 20:58:01 2007 | http://epydoc.sourceforge.net |