Ryan Petrello af84b25726 prevent cross site request forgery in websockets w/ the CSRF token ...

now that we have the CSRF middleware, we have a reliable token
available to us which we can use to verify individual ws_receive
payloads;  this is _simpler_ than making sure you've properly configured
trusted origins, and it's also more secure than Origin header checks

see: https://github.com/ansible/tower/issues/2661

2018-07-25 09:47:53 -04:00

..

__init__.py

fixed copyright date

2015-06-11 16:10:23 -04:00

defaults.py

prevent cross site request forgery in websockets w/ the CSRF token

2018-07-25 09:47:53 -04:00

development_quiet.py

remove statsd

2016-05-10 11:56:04 -04:00

development.py

Adds websocket origin whitelist

2018-07-24 16:53:48 -04:00

local_settings.py.docker_compose

parallelize test running

2018-05-16 14:29:15 -04:00

local_settings.py.example

Remove some obsolete code.

2018-02-26 14:55:13 -05:00

production.py

Replace logging-related restart with dynamic handler

2018-05-02 09:47:22 -04:00