Commit - pagure - 4cfa1e4e36772cd265584ce2f45c8619717bebec

    Block all POST requests on the UI and the API for blocked users
    
    Expand the test on blocked users ensure POST actions are not accessible
    via neither the UI nor the API.
    
    Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

pagure/api/__init__.py

file modified

+32 -0

pagure/flask_app.py

file modified

+5 -0

tests/test_pagure_flask_api.py

file modified

+4 -3

tests/test_pagure_flask_api_project_blockuser.py

file modified

+82 -26

mattia / pagure

Source Code

4cfa1e4 Block all POST requests on the UI and the API for blocked users

4 files Authored by pingou 5 years ago, Committed by pingou 5 years ago,

`4cfa1e4` Block all POST requests on the UI and the API for blocked users