simonw/re_enable_lookups_allowed.py

Created May 4, 2016 22:34

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/simonw/75a68c207994f7432da3b4f8d4dbbabe.js"></script>
Save simonw/75a68c207994f7432da3b4f8d4dbbabe to your computer and use it in GitHub Desktop.

Download ZIP

How to re-enable arbitrary querystring lookups for Django objects in the admin (deliberately re-opening this old security hole so only do this if you 100% trust everyone with access to your Django admin panel: https://www.djangoproject.com/weblog/2010/dec/22/security/ )

Raw

re_enable_lookups_allowed.py

	admin.site.register(MyModel,
	lookup_allowed=lambda args, *kwargs: True,
	)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment