Mercurial > libervia-web

annotate libervia/web/pages/u/blog/page_meta.py @ 1598:86c7a3a625d5

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
server: always start a new session on connection: The session was kept when a user was connecting from service profile (but not from other profiles), this was leading to session fixation vulnerability (an attacker on the same machine could get service profile session cookie, and use it when a victim would log-in). This patch fixes it by always starting a new session on connection. fix 443
author Goffi <goffi@goffi.org>
date Fri, 23 Feb 2024 13:35:24 +0100
parents eb00d593801d
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1216
b2d067339de3 python 3 port:
Goffi <goffi@goffi.org>
parents: 1124
diff changeset
1 #!/usr/bin/env python3
1239
f511f8fbbf8a fixed shebangs
Goffi <goffi@goffi.org>
parents: 1216
diff changeset
2
1035
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
3
1216
b2d067339de3 python 3 port:
Goffi <goffi@goffi.org>
parents: 1124
diff changeset
4 name = "user_blog"
1035
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
5
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
6
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
7 def parse_url(self, request):
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
8 # in this subpage, we want path args and query args
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
9 # (i.e. what's remaining in URL: filters, id, etc.)
09f5a5d649df pages (u/blog): new user_blog page which redirect to blog but using profile instead of service/node
Goffi <goffi@goffi.org>
parents:
diff changeset
10 # to be used by blog's url parser, so we don't skip parse_url
1509
106bae41f5c8 massive refactoring from camelCase -> snake_case. See backend commit log for more details
Goffi <goffi@goffi.org>
parents: 1239
diff changeset
11 data = self.get_r_data(request)
1216
b2d067339de3 python 3 port:
Goffi <goffi@goffi.org>
parents: 1124
diff changeset
12 service = data["service"]
1509
106bae41f5c8 massive refactoring from camelCase -> snake_case. See backend commit log for more details
Goffi <goffi@goffi.org>
parents: 1239
diff changeset
13 self.page_redirect(
1216
b2d067339de3 python 3 port:
Goffi <goffi@goffi.org>
parents: 1124
diff changeset
14 "blog_view", request, skip_parse_url=False, path_args=[service.full(), "@"]
1113
cdd389ef97bc server: code style reformatting using black
Goffi <goffi@goffi.org>
parents: 1083
diff changeset
15 )