forgery | Easy and customizable generation of forged data | Mock library

I am using restTemplate for synchronous inter-service communication in a microservices architecture.

When we completed Veracode scan, we are getting Server-Side Request Forgery (SSRF) (CWE ID 918) in getForEntity method.

How to disable the following warning in Chrome devtool's console?

[Deprecation] The website requested a subresource from a network that it could only access because of its users' privileged network position. These requests expose non-public devices and servers to the internet, increasing the risk of a cross-site request forgery (CSRF) attack, and/or information leakage. To mitigate these risks, Chrome deprecates requests to non-public subresources when initiated from non-secure contexts, and will start blocking them in Chrome 92 (July 2021). See https://chromestatus.com/feature/5436853517811712 for more details.

I am deploying a django site for the first time on aws ubuntu linux ec2 instance. I used Apache and mySQL database. I was able to successfully deploy the site and it was accessible through my public IP but it gave a warning in the Chrome console:

[Deprecation] The website requested a subresource from a network that it could only access because of its users' privileged network position. These requests expose non-public devices and servers to the internet, increasing the risk of a cross-site request forgery (CSRF) attack, and/or information leakage. To mitigate these risks, Chrome deprecates requests to non-public subresources when initiated from non-secure contexts, and will start blocking them in Chrome 92 (July 2021).

My project uses Django Rest Framework to post and get requests. I have used react for frontend so I use its build folder as a template in django and my frontend sends request to the public ip of my server. I am also attaching my settings.py file in case any of my settings might be a problem.

I read somewhere that using a domain name would solve this error but I wasn't sure whether the issue was the same as mine. Also if this is the case then would I have to change the request url to my domain name instead of the public ip in my react build. This is my first time deploying a django site so any suggestions for my settings for deployment are appreciated. Thanks in advance. In case you guys need any more information please tell.

settings.py

I am working on copy move forgery detection and got stuck on one of the algorithms. I have an RGB image of 532x800 pixels.

When the following code is run:

I'm using CakePHP 3.4 (can't upgrade) and in order to protect the system from Cross Site Request Forgery I need to set the CSRF token cookie to SameSite = Strict. However, it seems this version of CakePHP can't handle such setting.

I have tried using the CsrfComponent class and loading the component in AppController

I know that this would be easier if I had different view models for login and register however unfortunately they must be in the same view model. This is the relevant methods in usercontroller

I would like to implement functionality for being able to search a QPlainTextEdit for a query string, and display all matched lines in a table. Selecting a row in the table should move the cursor to the correct line in the document.

Below is a working example that finds all matches and displays them in a table. How can I get to the selected line number in the string that the plaintextedit holds? I could instead use the match.capturedEnd() and match.capturedStart() to show the matches, but line numbers are a more intuitive thing to think of, rather than the character index matches.

Let's say I have this:

I have a .NET Core 3.1 Web API that I want to add XSRF protection to. So I now require an antiforgery token in an X-XSRF-TOKEN HTTP header on all of my endpoints as described here. JavaScript clients get a token by hitting the /antiforgerytoken endpoint, which sets an XSRF-TOKEN cookie containing the token. This all works fine, but as one would expect, the "Try it out!" feature in Swagger UI no longer works since the requests are missing the X-XSRF-TOKEN HTTP header. Is there a way to have SwaggerUI automatically call the /antiforgerytoken endpoint and include the token in the request being executed?