密码提示错误 about xss-receiver HOT 9 CLOSED

@auth_controller.route("/login", methods=['POST'])
def login():
    if isinstance(request.json, dict):
        password = request.json.get('password', None)
        username = request.json.get('username', None)

        if isinstance(username, str) and isinstance(password, str) and True:
            token = sign_token().decode()
            system_log = SystemLog(log_content=f'Admin login with username [{username}]')
            db.session.add(system_log)
            db.session.commit()
            return jsonify(Response.success('登录成功', token))
        else:
            return jsonify(Response.failed('用户名或密码错误'))
    else:
        return jsonify(Response.invalid('无效请求'))