Package trac :: Package util :: Module html :: Class FormTokenInjector

Class FormTokenInjector

markupbase.ParserBase --+    
                        |    
    HTMLParser.HTMLParser --+
                            |
                           FormTokenInjector

Identify and protect forms from CSRF attacks.

This filter works by adding a input type=hidden field to POST forms.

Instance Methods

__init__(self, form_token, out)
Initialize and reset this instance.

source code

handle_starttag(self, tag, attrs)

source code

handle_startendtag(self, tag, attrs)

source code

handle_charref(self, name)

source code

handle_entityref(self, name)

source code

handle_comment(self, data)

source code

handle_decl(self, data)

source code

handle_pi(self, data)

source code

handle_data(self, data)

source code

handle_endtag(self, tag)

source code

Inherited from HTMLParser.HTMLParser: check_for_whole_start_tag, clear_cdata_mode, close, error, feed, get_starttag_text, goahead, parse_bogus_comment, parse_endtag, parse_html_declaration, parse_pi, parse_starttag, reset, set_cdata_mode, unescape, unknown_decl