From 30134dbbc92cd2b5622d36e2d14db129c15d56e7 Mon Sep 17 00:00:00 2001 From: shortcutme Date: Tue, 10 Jul 2018 03:40:56 +0200 Subject: [PATCH] Store API changeable configuration keys in Config.py --- src/Config.py | 1 + src/Ui/UiWebsocket.py | 6 ++---- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/src/Config.py b/src/Config.py index cb4ae2a7..48b3e89a 100644 --- a/src/Config.py +++ b/src/Config.py @@ -15,6 +15,7 @@ class Config(object): self.action = None self.pending_changes = {} self.need_restart = False + self.keys_api_change_allowed = set(["tor", "fileserver_port", "language", "tor_use_bridges", "trackers_proxy", "trackers", "trackers_file", "open_browser"]) self.keys_restart_need = set(["tor", "fileserver_port"]) self.config_file = "zeronet.conf" diff --git a/src/Ui/UiWebsocket.py b/src/Ui/UiWebsocket.py index 24f5faee..e9a13403 100644 --- a/src/Ui/UiWebsocket.py +++ b/src/Ui/UiWebsocket.py @@ -986,10 +986,8 @@ class UiWebsocket(object): return self.response(to, {"error": "Not a directory"}) def actionConfigSet(self, to, key, value): - allowed_keys = ["tor", "language", "tor_use_bridges", "trackers_proxy"] - - if key not in allowed_keys: - self.response(to, {"error": "Forbidden"}) + if key not in config.keys_api_change_allowed: + self.response(to, {"error": "Forbidden you cannot set this config key"}) return config.saveValue(key, value)