Andal.LND/edx-platform
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

A /debug/run_python endpoint for staff to test the sandboxing of Python code.

Browse Source
This commit is contained in:
Ned Batchelder
2013-02-22 13:31:31 -05:00
parent df17c0c7dd
commit ec7a04fdb3
6 changed files with 56 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
lms/djangoapps/debug/__init__.py Normal file
View File

3
lms/djangoapps/debug/models.py Normal file
View File

@@ -0,0 +1,3 @@
from django.db import models
# Create your models here.

29
lms/djangoapps/debug/views.py Normal file
View File

@@ -0,0 +1,29 @@
"""Views for debugging and diagnostics"""
import pprint
from django.http import Http404
from django.contrib.auth.decorators import login_required
from django_future.csrf import ensure_csrf_cookie, csrf_exempt
from mitxmako.shortcuts import render_to_response
from codejail.safe_exec import safe_exec
@login_required
@ensure_csrf_cookie
def run_python(request):
if not request.user.is_staff:
raise Http404
c = {}
c['code'] = ''
c['results'] = None
if request.method == 'POST':
py_code = c['code'] = request.POST.get('code')
g, l = {}, {}
try:
safe_exec(py_code, g, l)
except Exception as e:
c['results'] = str(e)
else:
c['results'] = pprint.pformat(l)
return render_to_response("debug/run_python_form.html", c)

1
lms/envs/common.py
View File

@@ -589,6 +589,7 @@ INSTALLED_APPS = (
# For testing
'django.contrib.admin', # only used in DEBUG mode
'debug',
# Discussion forums
'django_comment_client',

19
lms/templates/debug/run_python_form.html Normal file
View File

@@ -0,0 +1,19 @@
<html><body>
<div>
<p>Python:</p>
<form method='post'>
<input type="hidden" name="csrfmiddlewaretoken" value="${ csrf_token }">
<div>
<textarea name='code' rows='20' cols='80'>${code|h}</textarea>
</div>
<input type='submit' value='Run it!'/>
</form>
</div>
%if results:
<div>
<p>Results:</p>
<pre>
${results|h}
</pre>
</div>
%endif

4
lms/urls.py
View File

@@ -358,6 +358,10 @@ urlpatterns += (
url(r'^comm/foldit_ops', 'foldit.views.foldit_ops', name="foldit_ops"),
)
urlpatterns += (
url(r'^debug/run_python', 'debug.views.run_python'),
)
urlpatterns = patterns(*urlpatterns)
if settings.DEBUG: