[DSEC-932] updates Werkzeug and Flask. (#589)

* The hash has changed, changing regex.

* update werkzeug

* try updating flask

* remove flaskapi

* add csrf protection

* update flask-cors

* remove commented line

* pin config connector version

* add CSRF library

* remove csrf library

Author: sarahgibs

sdarq/backend/requirements.txt

@@ -1,10 +1,9 @@
-Flask==2.1.3
+Flask>=3.0.0
 Flask-Limiter==3.8.0
 requests>=2.32.3
 requests-oauthlib>=1.0.0
 urllib3==1.26.19
-flask-api==3.1
-flask-cors==4.0.1
+flask-cors==4.0.2
 virtualenv==16.0.0
 jira==2.0.0
 gunicorn[gevent]>= 1.4
@@ -16,6 +15,6 @@ google-cloud-logging==3.11.1
 google-cloud-resource-manager==1.12.5
 google-api-core[grpc]==2.19.1
 python-owasp-zap-v2.4==0.1.0
-werkzeug==2.1.2
+werkzeug==3.0.6
 jsonschema==4.23.0
 markupsafe>=2.0.1

sdarq/backend/src/app.py

@@ -33,8 +33,7 @@
 import parse_data as parse_json_data
 import requests
 import slacknotify
-from flask import Response, jsonify, request
-from flask_api import FlaskAPI
+from flask import Flask, Response, jsonify, request
 from flask_cors import cross_origin
 from google.cloud import bigquery, firestore, pubsub_v1
 from jsonschema import validate
@@ -77,7 +76,7 @@
 loggingclient = google.cloud.logging.Client()
 loggingclient.setup_logging()
 
-app = FlaskAPI(__name__)
+app = Flask(__name__)
 
 client = bigquery.Client()
 

shared/global.sh

@@ -15,7 +15,7 @@ export PSP_ROLE="${NAMESPACE}-psp"
 export PSP_BINDING="${PSP_ROLE}"
 
 # install config connector
-gcloud storage cp gs://configconnector-operator/latest/release-bundle.tar.gz release-bundle.tar.gz
+gcloud storage cp gs://configconnector-operator/1.125.0/release-bundle.tar.gz release-bundle.tar.gz
 tar zxvf release-bundle.tar.gz
 kubectl apply -f operator-system/configconnector-operator.yaml