Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Security check when posting task config

Browse Source
This commit is contained in:
amcmanu3 2024-05-26 18:37:20 -04:00
parent caf35a6de8
commit b8681c0fce
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
app/classes/web/routes/api/servers/server/tasks/index.py
View File

@ -113,6 +113,18 @@ class ApiServersServerTasksIndexHandler(BaseApiHandler):
) )
if "parent" not in data: if "parent" not in data:
data["parent"] = None data["parent"] = None
if data.get("action_id"):
backup_config = self.controller.management.get_backup_config(
data["action_id"]
)
if backup_config["server_id"]["server_id"] != server_id:
return self.finish_json(
405,
{
"status": "error",
"error": "Server ID Mismatch",
},
)
task_id = self.tasks_manager.schedule_job(data) task_id = self.tasks_manager.schedule_job(data)
self.controller.management.add_to_audit_log( self.controller.management.add_to_audit_log(