tcjlj/flvx
1
0
Fork 0
mirror of https://github.com/Sagit-chu/flvx.git synced 2026-10-07 02:06:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): patch SSRF in federation node import and restrict its access

Browse Source
This commit is contained in:
sagitchu
2026-04-17 11:52:08 +08:00
parent 5503d146e6
commit 5e2580bd45
4 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go-backend/internal/http/middleware/auth.go
+1 -1
View File
@@ -109,7 +109,7 @@ func requiresAdmin(path string) bool {
return true
}
if strings.HasPrefix(path, "/api/v1/federation/share/") {
if strings.HasPrefix(path, "/api/v1/federation/share/") || strings.HasPrefix(path, "/api/v1/federation/node/") {
return true
}