Hopiu/django-axes
1
0
Fork 0
mirror of https://github.com/jazzband/django-axes.git synced 2026-03-16 22:30:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Limit the length of the values logged into the database. Refs #73

Browse source
This commit is contained in:
Camilo Nova 2014-05-10 12:38:04 -05:00
parent 22a7d7e160
commit 4daba3daa3
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
axes/decorators.py
View file

@ -85,11 +85,13 @@ def query2str(items):
If there's a field called "password" it will be excluded from the output.
"""
# Limit the length of the value to avoid a DoS attack
value_maxlimit = 256
kvs = []
for k, v in items:
if k != 'password':
kvs.append(six.u('%s=%s') % (k, v))
kvs.append(six.u('%s=%s') % (k, v[:256]))
return '\n'.join(kvs)