added Flask-paranoid module to secure cookies better

This commit is contained in:
iou1name 2018-06-05 17:19:59 -04:00
parent f750421141
commit d3c744e072
2 changed files with 5 additions and 2 deletions

View File

@ -6,6 +6,6 @@ Note: I switched to Gunicorn at some point because Bjoern was somehow annoying.
Dependencies:
```passlib argon2_cffi flask gunicorn```
```passlib argon2_cffi flask gunicorn flask-paranoid```
This application makes use of the `secrets` module (a cryptographically strong version of `random`) from the standard library, which is only available in Python 3.6+. If you really can't be bothered use the latest version of python3, or just don't want cryptographically strong random character filenames/prefixes for some reason, you can directly replace all instances of `secrets` with `random`.

View File

@ -14,6 +14,7 @@ from passlib.hash import argon2
from flask import Flask, session, request, abort, redirect, url_for, g, \
render_template
from werkzeug.utils import secure_filename
from flask_paranoid import Paranoid
class ReverseProxied(object):
"""
@ -74,6 +75,9 @@ app.config["UPLOAD_URL"] = "https://steelbea.me/up/"
app.config["DB_NAME"] = "fileHost.db"
app.config["DB_LOCK"] = threading.Lock()
paranoid = Paranoid(app)
paranoid.redirect_view = 'login'
def db_execute(*args, **kwargs):
"""
@ -88,7 +92,6 @@ def db_execute(*args, **kwargs):
return res
def init():
"""
Initializes the application.