gracedb/api/backends.py · 058fd28db8d6abcab9c5fa88bb207f534bb54d95 · Michael Coughlin / GraceDB Server

Forked from IGWN Computing and Software / GraceDB / GraceDB Server

Source project has a limited visibility.

5 years ago

Prevent certificate or basic auth on AJAX requests to the API · 058fd28d

Discovered that AJAX requests to the API from the web view were
using certificates in people's browsers even if they were logged
out of the Django session.  So when they wanted to view the page
as a public user they still saw some extra information.

No security risk since they needed to have a valid certificate
anyway, but a bit annoying.

058fd28d

History

Prevent certificate or basic auth on AJAX requests to the API

Tanner Prestegard authored 5 years ago

Discovered that AJAX requests to the API from the web view were
using certificates in people's browsers even if they were logged
out of the Django session.  So when they wanted to view the page
as a public user they still saw some extra information.

No security risk since they needed to have a valid certificate
anyway, but a bit annoying.

Code owners

Assign users and groups as approvers for specific file changes. Learn more.

Admin message