Skip to content

Commit f9492f5

Browse files
author
Daniel Neto
committed
fix: Add request validation to prevent untrusted access in configuration update
GHSA-vvfw-4m39-fjqf
1 parent c08694b commit f9492f5

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

objects/configurationUpdate.json.php

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,8 @@
1515
require_once $global['systemRootPath'] . 'objects/configuration.php';
1616
require_once $global['systemRootPath'] . 'objects/functions.php';
1717

18+
forbidIfIsUntrustedRequest('configurationUpdate');
19+
1820
_error_log("save configuration {$_POST['language']}");
1921

2022
$config = new AVideoConf();

0 commit comments

Comments
 (0)