Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #15082

Bug#1042561: ITP: asgi-csrf -- ASGI middleware for protecting against CSRF attacks

Cross-posted to 3 groups.

Show all headers | View raw

Package: wnpp
Severity: wishlist
Owner: Edward Betts <edward@4angle.com>
X-Debbugs-Cc: debian-devel@lists.debian.org, debian-python@lists.debian.org

* Package name    : asgi-csrf
  Version         : 0.9
  Upstream Author : Simon Willison
* URL             : https://github.com/simonw/asgi-csrf
* License         : Apache-2.0
  Programming Lang: Python
  Description     : ASGI middleware for protecting against CSRF attacks

  Python library that provides Cross-Site Request Forgery (CSRF) protection
  for ASGI (Asynchronous Server Gateway Interface) applications. It helps
  secure web applications from CSRF attacks by adding middleware that
  validates and protects against unauthorized requests.
  .
  Features:
  .
    - Adds CSRF protection to ASGI applications.
    - Supports popular ASGI frameworks like FastAPI and Starlette.
    - Integrates seamlessly into existing ASGI application pipelines.
    - Provides configurable settings for token generation and validation.
    - Allows for exclusion of specific routes or URLs from CSRF protection.
    - Ensures stateless and secure CSRF protection in asynchronous web
      environments.
  .
  CSRF attacks are a common security concern for web applications, and the
  asgi-csrf library aims to provide a straightforward solution for adding
  protection to ASGI-based applications, ensuring that users' interactions
  are safe and authenticated.

I plan to maintain this package as part of the Python team.

Back to linux.debian.maint.python | Previous | Next | Find similar | Unroll thread

Thread

Bug#1042561: ITP: asgi-csrf -- ASGI middleware for protecting against CSRF attacks Edward Betts <edward@4angle.com> - 2023-07-30 13:10 +0200

csiph-web