Groups > linux.debian.maint.python > #15082

Bug#1042561: ITP: asgi-csrf -- ASGI middleware for protecting against CSRF attacks

Path	csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From	Edward Betts <edward@4angle.com>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel, linux.debian.maint.python
Subject	Bug#1042561: ITP: asgi-csrf -- ASGI middleware for protecting against CSRF attacks
Date	Sun, 30 Jul 2023 13:10:02 +0200
Message-ID	<GXctb-3Oo9-1@gated-at.bofh.it> (permalink)
X-Original-To	Debian Bug Tracking System <submit@bugs.debian.org>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Sun Jul 30 11:06:10 2023
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-3.761
Reply-To	Edward Betts <edward@4angle.com>, 1042561@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	debian-devel@lists.debian.org, debian-python@lists.debian.org, wnpp@debian.org
X-Debian-Pr-Message	report 1042561
X-Debian-Pr-Package	wnpp
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Disposition	inline
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1783465
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	34
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Sun, 30 Jul 2023 12:02:33 +0100
X-Original-Message-ID	<20230730110233.2x56ksu36a6qqumo@4angle.com>
Xref	csiph.com linux.debian.bugs.dist:1156544 linux.debian.devel:108776 linux.debian.maint.python:15082

Cross-posted to 3 groups.

Show key headers only | View raw

Package: wnpp
Severity: wishlist
Owner: Edward Betts <edward@4angle.com>
X-Debbugs-Cc: debian-devel@lists.debian.org, debian-python@lists.debian.org

* Package name    : asgi-csrf
  Version         : 0.9
  Upstream Author : Simon Willison
* URL             : https://github.com/simonw/asgi-csrf
* License         : Apache-2.0
  Programming Lang: Python
  Description     : ASGI middleware for protecting against CSRF attacks

  Python library that provides Cross-Site Request Forgery (CSRF) protection
  for ASGI (Asynchronous Server Gateway Interface) applications. It helps
  secure web applications from CSRF attacks by adding middleware that
  validates and protects against unauthorized requests.
  .
  Features:
  .
    - Adds CSRF protection to ASGI applications.
    - Supports popular ASGI frameworks like FastAPI and Starlette.
    - Integrates seamlessly into existing ASGI application pipelines.
    - Provides configurable settings for token generation and validation.
    - Allows for exclusion of specific routes or URLs from CSRF protection.
    - Ensures stateless and secure CSRF protection in asynchronous web
      environments.
  .
  CSRF attacks are a common security concern for web applications, and the
  asgi-csrf library aims to provide a straightforward solution for adding
  protection to ASGI-based applications, ensuring that users' interactions
  are safe and authenticated.

I plan to maintain this package as part of the Python team.

Back to linux.debian.maint.python | Previous | Next | Find similar | Unroll thread

Thread

Bug#1042561: ITP: asgi-csrf -- ASGI middleware for protecting against CSRF attacks Edward Betts <edward@4angle.com> - 2023-07-30 13:10 +0200

csiph-web