BCStudentSoftwareDevTeam / BCStudentSoftwareDevTeam/cas
Authorization.py untrustworthy
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
**[Original report](https://bitbucket.org/laborstudents/cas-flask/issue/322) by Katelyn Adams (Bitbucket: [paesh1997](https://bitbucket.org/paesh1997), GitHub: [paesh1997](https://github.com/paesh1997)).**
----------------------------------------
All functions in authorization.py using g.user are all untrustworthy, since g is global and only sets one instance for the entire app, not the person who is running it.
Should be using Authorize User class instead, since it differentiates between sessions.
cas-flask/app/logic/getAuthUser.py
Files affected:
authorization.py
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.