DemocracyLab / DemocracyLab/CivicTechExchange
Admin Page should be hid for security
- Dominant language
- JavaScript
- Stars
- 105
- Forks
- 71
- PR merge metrics
- No merged PRs in 30d
Description
Now, the admin page exposed in default way. It put the system in risk.
Here are how other well-known Django websites handle it.
Contributor guide
Research direction
Start by reviewing the Django admin entry point and the open pull request #1007, since related work is already underway. Confirm the intended default exposure behavior from the issue’s examples; done means the admin page is no longer exposed by default without breaking legitimate administrative access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100