[Backlogmanager] [FIWARE-JIRA] (HELP-13462) [fiware-stackoverflow] CSRF implementation in core CKAN code

[Veronika Vlnkova (JIRA)]

     [ https://jira.fiware.org/browse/HELP-13462?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Veronika Vlnkova resolved HELP-13462.
-------------------------------------
    Resolution: Done

> [fiware-stackoverflow] CSRF implementation in core CKAN code
> ------------------------------------------------------------
>
>                 Key: HELP-13462
>                 URL: https://jira.fiware.org/browse/HELP-13462
>             Project: Help-Desk
>          Issue Type: Monitor
>          Components: FIWARE-TECH-HELP
>            Reporter: Backlog Manager
>            Assignee: Francisco de la Vega
>              Labels: ckan, fiware
>
> Created question in FIWARE Q/A platform on 12-02-2018 at 15:02
> {color: red}Please, ANSWER this question AT{color} https://stackoverflow.com/questions/48748288/csrf-implementation-in-core-ckan-code
> +Question:+
> CSRF implementation in core CKAN code
> +Description:+
> This extension to CKAN could work to provide security features in CKAN. This extension provides Cookie-based CSRF protection for requests in CKAN. But according to this , it is not implemented as a part of core CKAN because the method used in this extension to provide CSRF protection is conflicting with the future plan of CKAN's own implementation of CSRF protection.
> So, my question is 
> 1. Is there any implementation of CSRF protection in core CKAN code? 
> 2. What are different methods we can use to implement CSRF protection and what is the best method to implement it in core CKAN?



--
This message was sent by Atlassian JIRA
(v6.4.1#64016)