MISP
/
misp-dashboard
mirror of https://github.com/MISP/misp-dashboard
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [auth] only send debug token when MISP is running in debug mode.

pull/140/head
VVX7 2019-12-20 15:16:17 -05:00
parent ad1e776906
commit ed7e5d03bf
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
server.py
View File

@ -113,7 +113,6 @@ class User(UserMixin):
"data[_Token][key]": "",
"data[_Token][fields]": "",
"data[_Token][unlocked]": "",
# "data[_Token][debug]": "",
"data[User][email]": self.id,
"data[User][password]": self.password,
}
@ -140,7 +139,11 @@ class User(UserMixin):
post_data["data[_Token][fields]"] = token_fields.group(1)
post_data["data[_Token][key]"] = token_key.group(1)
# post_data["data[_Token][debug]"] = token_debug.group(1)
# debug_token should return None when MISP debug is off.
# Only send debug_token when MISP is running in debug mode.
if token_debug is not None:
post_data["data[_Token][debug]"] = token_debug.group(1)
# POST request with user credentials + hidden form values.
post_to_login_page = session.post(misp_login_page, data=post_data, allow_redirects=False)