yahoo-eng-team team mailing list archive

[Matthias Runge <1331434@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

https://github.com/openstack/horizon/blob/master/openstack_dashboard/dashboards/admin/metering/templates/metering/stats.html

uses a hard coded form, but should rather use django forms. 
There's no real security check, csrf protection, etc.

** Affects: horizon
     Importance: High
         Status: Triaged

** Changed in: horizon
       Status: New => Triaged

** Changed in: horizon
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1331434

Title:
  use a django form

Status in OpenStack Dashboard (Horizon):
  Triaged

Bug description:
  https://github.com/openstack/horizon/blob/master/openstack_dashboard/dashboards/admin/metering/templates/metering/stats.html

  uses a hard coded form, but should rather use django forms. 
  There's no real security check, csrf protection, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1331434/+subscriptions