ly3too opened a new issue #3779:
URL: https://github.com/apache/incubator-dolphinscheduler/issues/3779


   *For better global communication, please give priority to using English 
description, thx! *
   
   *Please review 
https://dolphinscheduler.apache.org/en-us/docs/development/issue.html when 
describe an issue.*
   
   **Describe the feature**
   csrf protection needed to protect sesitive requests !!!
   
   **Is your feature request related to a problem? Please describe.**
   ds has no csrf protection. a simple csrf attach can cause serious problem, 
e.g. deleting of user account.
   
   **Describe the solution you'd like**
   spring-security is a simple solution.
   
   **Describe alternatives you've considered**
   no
   
   **Additional context**
   no
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to