7 commits

Author	SHA1	Message	Date
catborise	cf1cde376b	fix: require POST for user block/unblock and OTP email, flag console cookie ... - user_block, user_unblock and admin_email_otp changed state on GET, so an <img> tag could lock a user out or trigger OTP emails through an admin's session. They now require POST; the buttons are CSRF forms. - The console token cookie is set with httponly, SameSite=Lax and, on HTTPS, secure. Only novncd reads it; the page gets the token directly.	2026-10-02 22:44:00 +03:00
catborise	c31ed28042	test: expand unit test coverage across admin, accounts, vrtManager, logs, appsettings, and datasource	2026-09-25 11:26:53 +03:00
catborise	217e106c8b	format python code with black	2022-11-02 08:54:35 +03:00
Real-Gecko	10b6f88dbb	Added coverage.py support	2020-05-29 19:37:49 +06:00
Real-Gecko	5ab22ba947	Added accounts test(moved from admin) ... Actuall added admin tests	2020-05-29 15:47:13 +06:00
Real-Gecko	7b0016c0b2	Some test for computes	2020-05-29 14:00:51 +06:00
Real-Gecko	83b1dde673	Added admin app unit tests	2020-05-29 12:46:25 +06:00