http-verbs-get-to-post-csrf
modified: .gitignore
modified: development.ini
modified: make_post_sell/static/css/common.css
modified: make_post_sell/templates/cart.j2
modified: make_post_sell/templates/cart_checkout.j2
modified: make_post_sell/templates/product.j2
modified: make_post_sell/templates/snippets/csrf.j2
modified: make_post_sell/views/cart.py
Summary by CodeRabbit
-
New Features
- All cart and checkout actions now use secure POST forms with CSRF protection, enhancing security for adding, removing, and updating products in the cart.
-
Bug Fixes
- Improved transactional integrity during checkout to ensure that database changes only occur after successful payment.
-
Style
- Unified button styles for both anchor and button elements, ensuring consistent appearance across cart and product actions.
-
Chores
- Updated session cookie settings for improved security and domain handling.
- Excluded the data directory from version control.
Edited by CodeRabbit