mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
Failed logins are logged now, so S-16 applies: what a user types as a username must not break a row or forge another record. The Logs page shows each value in its own cell, escaped, and the writer cuts the username to the 150-character field (Django's login form does not stop a longer one). The file-log line written when a row cannot be saved escaped only "\n"; it now escapes "\r" too, so a CR LF in a username stays one line. |
||
|---|---|---|
| .. | ||
| migrations | ||
| tests | ||
| __init__.py | ||
| apps.py | ||
| audit.py | ||
| models.py | ||
| urls.py | ||
| views.py | ||