-
Notifications
You must be signed in to change notification settings - Fork 16
Open
Description
All your TR fields on the form class are singletons. This is a dangerous security risk. Please correct this and fix it in your documentation. I will try and submit a pull request but I'm swamped with work and advocacy.
The answer is to define your fields in methods or properties. For example:
class BrainTreeForm(forms.Form):
@property
def tr_fields = OrderedDict([
("transaction", OrderedDict([
("amount", None),
("customer", OrderedDict([
("first_name", None),
("last_name", None),
("company", None),
("email", None),
("phone", None),
("fax", None),
("website", None)]),
),
....
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels