fix: закрыть уязвимости (CSRF, rate limit, секреты, CSV-injection, LIKE-экранирование)

2026-08-04 00:03:40 +04:00
parent f55735a59e
commit 0c6740ac53
6 changed files with 53 additions and 11 deletions
@@ -25,6 +25,7 @@
            {% endif %}
        {% endwith %}
        <form action="{{ url_for('admin_login') }}" method="post" class="admin-login-form">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
            <label for="password">Пароль администратора</label>
            <input id="password" type="password" name="password" placeholder="Введите пароль" autocomplete="current-password" required autofocus>
            <button class="button button-primary form-button" type="submit">Войти в панель <span>↗</span></button>