diff --git a/scipost/views.py b/scipost/views.py index a31485495cb11b8d121e7a961c7f1994241f4b99..da0db506e3da544456ccedc34e0580ef9662385e 100644 --- a/scipost/views.py +++ b/scipost/views.py @@ -1325,6 +1325,10 @@ def csrf_failure(request, reason=""): Custom CRSF Failure. Informing admins via email as well. """ body = 'Error message: ' + reason + '\nUser: ' + str(request.user) - body += '\nRequest GET: ' + str(request.GET) + '\nRequest POST: ' + str(request.POST) + body += '\nRequest GET: ' + str(request.GET) + '\nRequest POST: ' + post_data = dict(request.POST) + if 'password' in post_data: + post_data['password'] = '******' + body += str(post_data) mail.mail_admins('CRSF Failure', body) return render(request, 'crsf-failure.html') diff --git a/templates/crsf-failure.html b/templates/crsf-failure.html index 60d2fbb32dba68b2acbdb7e9254822ad0f1d2505..da3a85b8a21e5c1e2144a635cacb38ba83dafd47 100644 --- a/templates/crsf-failure.html +++ b/templates/crsf-failure.html @@ -1,6 +1,6 @@ {% extends 'scipost/base.html' %} -{% block pagetitle %}: 500{% endblock pagetitle %} +{% block pagetitle %}: CRSF Failure{% endblock pagetitle %} {% block content %}