Link: https://code.launchpad.net/~edb/quam-plures/nonce_prework
In response to a possible cross site scripting attack, some of the team settled on a nonce as the right way to better secure an installation. Unfortunately the code base isn't as tight as it should be so there were areas where we weren't implementing the nonce approach even though we should be. This branch dances around the edges of the nonce solution by tightening up how admin-side forms are built.
Comment feed for this post
