NEW UPDATE!!! `v0.3.1` of Ktor Panel is now avail...
# feed
m
NEW UPDATE!!!
v0.3.1
of Ktor Panel is now available Features: • Added document type declaration to HTML output to ensure standards mode and avoid quirks mode in browsers. • Support for custom favicon via configuration • Abstracted template rendering via a
TemplateRenderer
interface, allowing support for multiple template engines ( e.g., Mustache, FreeMarker, Thymeleaf, etc.) instead of being limited to Mustache. • Switched from CDN to locally compiled Tailwind CSS. • Configured Tailwind CLI to purge unused styles and minify output. Note: Versions prior to 0.3.1 had dependency resolution issues and are not installable. Please use 0.3.1 or newer. Special thanks to @Emanuele Iannuzzi for the feedback Source: https://github.com/believemanasseh/ktor-panel Docs: https://ktor-panel.readthedocs.io Demo: https://ktor-panel.daimones.xyz
🙌 1
a
Your authorization is very unsafe, or actually non-existing. You check if any session_id cookie exists.... not if it is a valid session_id cookie. By just setting a random cookie I was able to login:
Copy code
curl '<https://ktor-panel.daimones.xyz/admin/users/list>' -b 'session_id=fake id'
🙌 2
e
Yeah, I second this @Arjan van Wieringen
@Arjan van Wieringen @Manasseh Issue created: https://github.com/believemanasseh/ktor-panel/issues/2