Hamiz5401 / TO-DOZ

Web application for KU student
1 stars 0 forks source link

Security - App running on heroku with DEBUG=True #112

Closed fatalaijon closed 1 year ago

fatalaijon commented 1 year ago

I got this error page from your app at https://todoz-phukit.herokuapp.com/To-Doz/get_classroom_data?state=h9C2VmfqbG7NujVYMhbshqO93limJd&code=4/0AfgeXvuu7-tlv2oOXsdLcb0R5G88n_dkJyNfsoZSD7sP-lGZF6xrRZWdCEnRHOdtPZV63g&scope=email%20profile%20https://www.googleapis.com/auth/classroom.courses.readonly%20https://www.googleapis.com/auth/userinfo.profile%20https://www.googleapis.com/auth/userinfo.email%20openid&authuser=0&hd=ku.th&prompt=consent

It shows you are running the app in the cloud with DEBUG=True. That's a security problem. [Uploading Warning at _To-Doz_get_classroom_data-20221128.pdf…]()

Hamiz5401 commented 1 year ago

Change DEBUG to False