oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't allow NOSANDBOX permission on a proxy as it can leak cookies

Browse source
This commit is contained in:
shortcutme 2018-02-21 03:14:43 +01:00
parent 2f2c49cc47
commit bee8aac0cc
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
plugins/disabled-Multiuser/MultiuserPlugin.py
View file

@ -178,6 +178,14 @@ class UiWebsocketPlugin(object):
message += "and help to make a better network, then please run your own <a href='https://zeronet.io' target='_blank'>ZeroNet client</a>.</small>" message += "and help to make a better network, then please run your own <a href='https://zeronet.io' target='_blank'>ZeroNet client</a>.</small>"
self.cmd("notification", ["info", message]) self.cmd("notification", ["info", message])
def actionPermissionAdd(self, to, permission):
if permission == "NOSANDBOX":
self.cmd("notification", ["info", "You can't disable sandbox on this proxy!"])
self.response(to, {"error": "Denied by proxy"})
return False
else:
return super(UiWebsocketPlugin, self).actionPermissionAdd(to, permission)
@PluginManager.registerTo("ConfigPlugin") @PluginManager.registerTo("ConfigPlugin")
class ConfigPlugin(object): class ConfigPlugin(object):