
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
django-debug-toolbar-force
Advanced tools
Force debugging of partial- or non-HTML views in django-debug-toolbar.
Show django-debug-toolbar
in non- or partial-HTML views.
.. image:: https://img.shields.io/pypi/v/django-debug-toolbar-force.svg :target: https://pypi.python.org/pypi/django-debug-toolbar-force :alt: PyPI Version
.. image:: https://img.shields.io/pypi/pyversions/django-debug-toolbar-force.svg :target: https://pypi.python.org/pypi/django-debug-toolbar-force/ :alt: Supported Python versions
.. image:: https://img.shields.io/travis/barseghyanartur/django-debug-toolbar-force/master.svg :target: http://travis-ci.org/barseghyanartur/django-debug-toolbar-force :alt: Build Status
.. image:: https://readthedocs.org/projects/django-debug-toolbar-force/badge/?version=latest :target: http://django-debug-toolbar-force.readthedocs.io/en/latest/?badge=latest :alt: Documentation Status
.. image:: https://img.shields.io/badge/license-GPL--2.0--only%20OR%20LGPL--2.1--or--later-blue.svg :target: https://github.com/barseghyanartur/django-debug-toolbar-force/#License :alt: GPL-2.0-only OR LGPL-2.1-or-later
.. image:: https://coveralls.io/repos/github/barseghyanartur/django-debug-toolbar-force/badge.svg?branch=master :target: https://coveralls.io/github/barseghyanartur/django-debug-toolbar-force?branch=master :alt: Coverage
Documentation is available on Read the Docs <http://django-debug-toolbar-force.readthedocs.io/>
_.
(1) Install latest stable version from PyPI:
.. code-block:: sh
pip install django-debug-toolbar-force
or latest stable version from GitHub:
.. code-block:: sh
pip install https://github.com/barseghyanartur/django-debug-toolbar-force/archive/stable.tar.gz
(2) Add debug_toolbar_force.middleware.ForceDebugToolbarMiddleware
to
MIDDLEWARE
(or MIDDLEWARE_CLASSES
for older versions of Django)
of the your projects' Django settings (you would
typically do that in your dev settings only).
.. code-block:: python
MIDDLEWARE += (
'debug_toolbar.middleware.DebugToolbarMiddleware',
'debug_toolbar_force.middleware.ForceDebugToolbarMiddleware',
)
In your browser, visit a non-HTML view and append ?debug-toolbar
at the
end.
.. code-block:: text
GET http://localhost:8000/foo/json-view/?debug-toolbar
Simply type:
.. code-block:: sh
pytest -vvv
or use tox:
.. code-block:: sh
tox
or use tox to check specific env:
.. code-block:: sh
tox -e py310
GPL-2.0-only OR LGPL-2.1-or-later
For any security issues contact me at the e-mail given in the Author
_ section.
For overall issues, go to GitHub <https://github.com/barseghyanartur/django-debug-toolbar-force/issues>
_.
Artur Barseghyan artur.barseghyan@gmail.com
FAQs
Force debugging of partial- or non-HTML views in django-debug-toolbar.
We found that django-debug-toolbar-force demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.