CSRF $#%?@!!. Also konami to django admin

This commit is contained in:
Paul Mathieu 2023-08-03 20:11:38 +02:00
parent e8abfaf51b
commit b838c79cdb
2 changed files with 2 additions and 2 deletions

View File

@ -30,7 +30,7 @@ SECRET_KEY = 'django-insecure-64qxpe55#9wy=5@#dl0)3w7ywxh48m!f&!slp9e7v4lh@hjdct
DEBUG = True DEBUG = True
ALLOWED_HOSTS = ['*'] ALLOWED_HOSTS = ['*']
CSRF_TRUSTED_ORIGINS = ['https://*'] CSRF_TRUSTED_ORIGINS = ['https://*.ponteilla.net']
# Application definition # Application definition

View File

@ -67,7 +67,7 @@ function konami() {
$(document).keydown(function (e) { $(document).keydown(function (e) {
if (e.keyCode === k[n++]) { if (e.keyCode === k[n++]) {
if (n === k.length) { if (n === k.length) {
document.location.href = 'newtikette.html'; document.location.href = backend_api + 'admin';
} }
} }
else { else {