#22800: FormWizards leak data into other forms.
-----------------------------------+--------------------
     Reporter:  danielsamuels      |      Owner:  nobody
         Type:  Bug                |     Status:  new
    Component:  contrib.formtools  |    Version:  1.6
     Severity:  Normal             |   Keywords:
 Triage Stage:  Unreviewed         |  Has patch:  0
Easy pickings:  0                  |      UI/UX:  0
-----------------------------------+--------------------
 Consider an events booking system where someone selects their tickets,
 adds their payment information but then decides to navigate away on the
 last page.  If they then went to a different event all of their payment
 information etc would be shown as the initial data in the new form, even
 though it's on a completely different URL with completely different
 content.  This really shouldn't be happening.  It would be useful to limit
 the form data to a specific form, either by URL or by some sort of form
 hash which is different for each form.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/22800>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/056.f317db13c8b498753df4d380f218b164%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to