self-hosted/calibre-web
1
0
Fork 0
mirror of https://github.com/janeczku/calibre-web.git synced 2025-06-02 23:17:40 +02:00
Code Issues Releases Activity

Don't leak to non-admin users the current installed version

Browse Source
This commit is contained in:
jvoisin 2020-10-29 14:03:18 +01:00
parent 5792838333
commit 8b60a19577
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cps/admin.py
View File

@ -1029,7 +1029,8 @@ def send_logfile(logtype):
@admi.route("/get_update_status", methods=['GET']) @admi.route("/get_update_status", methods=['GET'])
@login_required_if_no_ano @login_required
@admin_required
def get_update_status(): def get_update_status():
log.info(u"Update status requested") log.info(u"Update status requested")
return updater_thread.get_available_updates(request.method, locale=get_locale()) return updater_thread.get_available_updates(request.method, locale=get_locale())