Code Monkey home page Code Monkey logo

easybuggy4django's Introduction

trophy movie

easybuggy4django's People

Contributors

dependabot[bot] avatar k-tamura avatar ryutok avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar

Forkers

ryutok modulexcite kittakatakashi jharriscx kaovoov myeeee masahh paulgreaney penguinmura jkindsvater l00169942 robertmicklecx menddemo-josh snyk-schmidtty jyom-wss-test ksalman-cx-org-na-kelsey-na l00171222 atuankush sastmigrationorg jkinsfather-demo a16942 drdavella bachstakoven devopslecturer2022-2023

easybuggy4django's Issues

easybuggy4django does not compile

Please upgrade Pillow package to the lastest available. Current requirement for 5.1.0 fails with the following error:

   The headers or library files could not be found for zlib,
    a required dependency when compiling Pillow from source.

See more here: python-pillow/Pillow#5745

Command injection attack does not work

It actually looks like the email address is being properly validated by this app, which prevents the command injection attack from working:

easybuggy4django/easybuggy/views.py

Lines 552 to 554 in 01f060e

if request.method == 'POST':
address = request.POST.get("address")
if validate_email(address):

It seems like you need to be using a less stringent check for the email address in order for this attack to work.

It's kind of funny to ask you to make your app more vulnerable 😆

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.