dmpayton / django-admin-honeypot

:honey_pot: A fake Django admin login screen page.
http://django-admin-honeypot.readthedocs.io/
MIT License
1.03k stars 188 forks source link

HTML not Escaping in admin interface #54

Closed ghost closed 4 years ago

ghost commented 6 years ago

For example: <a href="?session_key=None">None</a> <a href="?path=/admin/login/?next=/admin/">/admin/login/?next=/admin/</a>

twlo commented 5 years ago

I am also having this problem, and it doesn't seem to be capturing the ip address at all.

jaap3 commented 4 years ago

There's also PR #61 and #63 :)