-
-
Notifications
You must be signed in to change notification settings - Fork 195
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Jcerjak plip10359 security controlpanel #329
Conversation
….controlpanel"" This reverts commit f6f4456.
…jcerjak/Products.CMFPlone into jcerjak-plip10359-security-controlpanel
>>> self.assertFalse('Changes saved.' in browser.contents) | ||
>>> browser.open('http://nohost/plone/logout') | ||
|
||
A >>> browser.open('http://nohost/plone/@@personal-information') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@vangheem We moved the security control panel to use the plone.app.registry-based control panels (#216). It seems this breaks the csrf protection, so I had to comment out that test. The _authenticator form field is present. Though, it seems it does not have any effect what value it holds. Would you mind having a look or give us some pointers how we could fix that? cc @jcerjak
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@vangheem Is it possible that the csrf protection never has been implemented for plone.app.registry?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
…panel Jcerjak plip10359 security controlpanel
No description provided.