AJUSTADO PRA NAO USAR DEBUG DO ENVIRONMENT, SEMPRE ADICIONAR DJANGO_DEBUG=False NO INICIO DO .ENV

sapl/base/templatetags/common_tags.py

@@ -257,36 +257,36 @@ def str2intabs(value):
     except:
         return ''
 
+
 @register.filter
-def has_iframe(obj):
+#def has_iframe(request):
-    """
+#
-    Espera receber HttpRequest.
+#    iframe = request.session.get('iframe', False)
-    Se vier string/None/outro tipo, não quebra template.
+#    if not iframe and 'iframe' in request.GET:
-    """
+#        ival = request.GET['iframe']
-    session = getattr(obj, "session", None)
+#        if ival and int(ival) == 1:
-    if not session:
+#            request.session['iframe'] = True
+#            return True
+# elif 'iframe' in request.GET:
+    #    ival = request.GET['iframe']
+   #     if ival and int(ival) == 0:
+  #          del request.session['iframe']
+ #           return False
+#
+#    return iframe
+def has_iframe(request):
+    # Em alguns templates essa tag pode receber string (ex.: request.path),
+    # então protegemos pra não derrubar a página.
+    if not hasattr(request, "session"):
         return False
-
+    return request.session.get("iframe", False)
-    iframe = session.get('iframe', False)
-    if not iframe and hasattr(obj, 'GET') and 'iframe' in obj.GET:
-        ival = obj.GET['iframe']
-        if ival and int(ival) == 1:
-            session['iframe'] = True
-            return True
-    elif hasattr(obj, 'GET') and 'iframe' in obj.GET:
-        ival = obj.GET['iframe']
-        if ival and int(ival) == 0:
-            del session['iframe']
-            return False
-
-    return iframe
 
 
 @register.filter
 def url(value):
-    if not isinstance(value, str):
+    if value.startswith('http://') or value.startswith('https://'):
-        return False
+        return True
-    return value.startswith(('http://', 'https://'))
+    return False
 
 
 @register.filter

sapl/settings.py

@@ -34,7 +34,9 @@ PROJECT_DIR = Path(__file__).ancestor(2)
 # SECURITY WARNING: keep the secret key used in production secret!
 SECRET_KEY = config('SECRET_KEY', default='32jk1h412l3kjh421lkj4hlkj234')
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = config('DEBUG', default=False, cast=bool)
+#DEBUG = config('DEBUG', default=False, cast=bool)
+DEBUG = config('DJANGO_DEBUG', default=False, cast=bool)
+
 
 MESSAGE_STORAGE = 'django.contrib.messages.storage.session.SessionStorage'
 
@@ -154,10 +156,11 @@ MIDDLEWARE = [
     'sapl.middleware.CheckWeakPasswordMiddleware',
     'django_prometheus.middleware.PrometheusAfterMiddleware',
 ]
-if DEBUG:
+if DEBUG and 'runserver' in sys.argv:
     INSTALLED_APPS += ('debug_toolbar',)
-    MIDDLEWARE += ['debug_toolbar.middleware.DebugToolbarMiddleware', ]
+    MIDDLEWARE += ['debug_toolbar.middleware.DebugToolbarMiddleware']
-    INTERNAL_IPS = ('127.0.0.1')
+    INTERNAL_IPS = ('127.0.0.1',)
+
 
 SITE_URL = config('SITE_URL', cast=str, default='')