django-axes/axes
Damian Dimmich 3d32483dae
Submitting null byte chars causes the user_login_failed code to crash (#578)
Submitting null byte chars like in the post data causes the save to database crash with the following:

/lib/python3.7/site-packages/django/db/backends/utils.py", line 86, in _execute
    return self.cursor.execute(sql, params)
ValueError: A string literal cannot contain NUL (0x00) characters.

I propose replacing these to something more palatable to the django ORM, and allowing axes to continue its work and block users with multiple failed login attempts that contain NUL characters.
2020-03-23 13:56:18 +02:00
..
handlers Submitting null byte chars causes the user_login_failed code to crash (#578) 2020-03-23 13:56:18 +02:00
locale Turkish translation added 2019-01-12 21:05:21 +03:00
management Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
migrations Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
tests docs: Fix simple typo, timdelta -> timedelta (#574) 2020-03-13 09:53:03 +02:00
__init__.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
admin.py Add AXES_ENABLE_ADMIN flag to configure showing Axes in admin (#499) 2019-10-09 19:02:45 +03:00
apps.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
attempts.py Pluggable user account whitelisting (#549) 2019-12-29 23:43:55 +02:00
backends.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
checks.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
conf.py Add configurable lockout callable 2020-01-08 21:28:14 +02:00
decorators.py Improve lockout and request handling 2019-05-19 18:32:40 +03:00
exceptions.py Upgrade QA tools 2019-11-12 12:08:42 +02:00
helpers.py Fix code format 2020-03-10 15:38:04 +02:00
middleware.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
models.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
signals.py Upgrade CI tooling to use automatic code formatting 2019-09-28 19:28:17 +03:00
utils.py Make reset for attempts and logs pluggable 2019-07-11 15:31:14 +02:00