Comments (7)
How can I change this chunk into externalized-jinja-happy template https://github.com/haoqili/MozSecWorld/blob/master/apps/msw/captcha.py#L33-44
:(
from mozsecworld.
^ trying to copy https://github.com/jbalogh/zamboni/blob/master/apps/amo/templates/amo/recaptcha_js.html, get "global name 'settings' is not defined" error
from mozsecworld.
^ latest push has https://github.com/haoqili/MozSecWorld/blob/7b4cff394aae590a637c7ad95a79c87dc5e33a29/apps/msw/recaptcha_test.py that gets new challenge strings from recaptcha every time
with the challenge string, append it to the end of "https://www.google.com/recaptcha/api/image?c=" to get a new recaptcha image
from mozsecworld.
Great resource found! https://github.com/mozilla/django-recaptcha
from mozsecworld.
Django-recaptcha uses the same recaptcha backend, with the "displayhtml()" function that contains the in-body javascript. The only difference is that they have a custom display. Let me try that.
from mozsecworld.
New Firebug bug
call to setInterval blocked by CSP recaptcha.js (line 23)
Because setInterval() is blocked by CSP.
Set it by: https://github.com/mozilla/django-csp/blob/master/README.rst
from mozsecworld.
2 break throughs, 1 question.
BT1: change into amo register's custom RecaptchaOptions to avoid in-body script.
BT2: have to allow setInterval like 'CSP_OPTIONS = ("eval-script",)'.
Q1 #45 How come amo register does not have "setInterval blocked by CSP" problem even without CSP_OPTIONS?
blog post about the in-body javascript
from mozsecworld.
Related Issues (20)
- 07_29_2011 HOT 2
- Add login info next to login
- update csrf to new one
- changes to x-frame demo
- make sql_inj_test database
- x-frame-options prettify and text
- more info for sql injection
- sql injection explaination
- sql injection make as form. display as template, not json.
- image rewrite as jpg
- big image resize to constant size
- 08_02_2011 HOT 1
- Rewrite Telnet --- why doesn't it have set-cookie??
- change prints to logs
- Put DB text into template HOT 1
- make front page http://mozsecworld.org/en-US/
- set_cookie_httponly/demo/ show cookies only in FireFox :(
- safe url table redesign
- Make diagrams of size < 50kb
- Put in code chunks
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mozsecworld.