Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent accessing bin/ script from the browser #9154

Closed
MrPetovan opened this issue Sep 7, 2020 · 0 comments · Fixed by #9155
Closed

Prevent accessing bin/ script from the browser #9154

MrPetovan opened this issue Sep 7, 2020 · 0 comments · Fixed by #9155
Assignees
@MrPetovan
Labels
Bug Security
Milestone
2020.09

Comments

@MrPetovan
Copy link
Collaborator

See https://forum.friendi.ca/display/2196d4ee-175f-552a-680f-664879990072

It is currently possible to trigger the worker script from a browser. Although there are limited security implications (error logging is done to a file, load is capped), this still isn't desirable.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@MrPetovan MrPetovan

Labels
Bug Security
Projects
None yet
Milestone
2020.09
Development

Successfully merging a pull request may close this issue.

Forbid non-CLI access to command-line scripts MrPetovan/friendica
1 participant
@MrPetovan