YunoHost/moulinette
1
0
Fork 0
mirror of https://github.com/YunoHost/moulinette.git synced 2024-09-03 20:06:31 +02:00
Code Issues Projects Releases Packages Wiki Activity

Fix empty password breach

Browse source
This commit is contained in:
Jerome Lebleu 2013-12-28 18:13:43 +01:00
parent eb265396b3
commit a1683dc4cd
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
yunohost.tac
View file

@ -42,8 +42,10 @@ def http_exec(request, **kwargs):
# Simple HTTP auth
elif installed:
authorized = request.getUser() == 'admin'
authorized = False
pwd = request.getPassword()
if request.getUser() == 'admin' and pwd != '':
authorized = True
if dev and 'api_key' in request.args:
pwd = request.args['api_key'][0]
authorized = True