Summary

Use the CheckAllowRefererMiddleware

Review Request #9194 — Created Sept. 14, 2017 and updated Oct. 21, 2017, 9:04 p.m. — Latest diff uploaded Oct. 20, 2017, 8:14 p.m.

Information

Owner

brennie

Repository

Review Board

Branch

release-2.0.x

Bugs

Depends On

~~9167~~

Commit

ac3ee23...

Reviewers

Groups

reviewboard

People

Description

The new CheckAllowRefererMiddleware from Djblets requires that sessions
created via the log in form are limited to having the Referer header in
future requests set to a whitelisted host.

Testing Done

See https://reviews.reviewboard.org/r/9167/