django-cloud-tasks icon indicating copy to clipboard operation
django-cloud-tasks copied to clipboard

Published 20 hours ago • verified publisher icon flamingo-run

Verify that the request comes from GCP

Open przemub opened this issue 1 year ago • 1 comments

The underlying GCP Pilot library requests that Google Cloud Tasks signs the request with an OIDC token, but there is no logic to check that in the view.

This is a security vulnerability since the tasks can be run by anyone now.

przemub avatar Jan 25 '24 20:01 przemub

Code Climate has analyzed commit aa9db5fb and detected 0 issues on this pull request.

View more on Code Climate.

codeclimate[bot] avatar Jan 25 '24 20:01 codeclimate[bot]