Block a user
69175979ff
Added the form name to the dummy forms so that they can be excluded by OWASP ZAP scanner for Anti-CSRF tokens.
2f69e0f215
Added the form name to the search forms so that they can be excluded by OWASP ZAP scanner for Anti-CSRF tokens.
961385c389
Added SESSION_COOKIE_SAMESITE and SESSION_COOKIE_SECURE to create_app of the test site, to set the SameSite and Secure flags for the session cookie.
4408bbfc82
Updated the JavaScript library versions, and added decimal.js-light to the documentation.
433110f486
Revised the way to query accounts with Flask-SQLAlchemy style queries in the accounts method of the CurrentAccount data model.
bc888195ad
Disabled logging in the AuthenticationTestCase and FlaskLoginTestCase test cases, for clearer test output.
8e69733cf6
Updated the login_required view decorator of the DigestAuth class, replaced writing to STDERR directly with warning through the Flask logger.
15ea650ddd
Revised the code that handles the "qop" and "stale" parameters of the "WWW-Authenticate" response HTTP header for the upcoming Werkzeug 2.4.
78a5faae31
Revised the code that handles the "qop" and "stale" parameters of the "WWW-Authenticate" response HTTP header to work with Werkzeug 2.4.
5b255b6504
Split the Flask-Login login manager initialization from the init_app method to the __init_login_manager method in the DigestAuth class, to simplify the code.
919b8d0dc3
Removed the unnecessary f-string in the __make_response_header method of the DigestAuth class.
46bd27e126
Revised the saveOriginalLineItem method of the JavaScript JournalEntryLineItemEditor class not to override the existing amount when the existing amount is less than the net balance. This make it easier when updating the existing journal entries.
b718d19450
Resolved an issue where, in cases where there was no existing localized title and the default title was submitted, the submitted account title or currency name would be erroneously saved as the localized title.
1daed940b6
Corrected the definition of the "is_offset" property in the "__get_line_items" method of the OffsetMatcher class.
8c899776f2
Corrected the filename in the csv method of the AccountsWithUnmatchedOffsets report class.
f9aa226bf9
Removed an unnecessary f-string from the csv method of the AccountsWithUnappliedOriginalLineItems report class.
c9bb4197be
Fixed the error calling the old "setEnableDescriptionAccount" method in the saveOriginalLineItem method of the JavaScript JournalEntryLineItemEditor class.
158058dcfb
Updated the documentation of the created_at, created_by, updated_at, updated_by, and visited_at columns of the data models, for consistency.
e861cae2e0
Replaced importing the "typing" module as "t" with importing the individual names in the "typing" module. We do not have as many names to import. This is also to be consistent with the practices of most major and standard packages and examples.