haeaeae/duplicati
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prevent the settings hash from being exposed as it has no value outside the settings update check.

Browse Source
This commit is contained in:
Kenneth Skovhede
2024-08-29 11:23:31 +02:00
parent 71053c6b94
commit f618aa830a
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Duplicati/WebserverCore/Endpoints/V1/ServerSetting.cs
+2
View File
@@ -20,6 +20,7 @@ public class ServerSetting : IEndpointV1
private static readonly string[] GUARDED_OUTPUT = [
Server.Database.ServerSettings.CONST.JWT_CONFIG,
Server.Database.ServerSettings.CONST.PBKDF_CONFIG,
Server.Database.ServerSettings.CONST.PRELOAD_SETTINGS_HASH,
// Not used anymore, but not completely removed
Server.Database.ServerSettings.CONST.SERVER_PASSPHRASE,
Server.Database.ServerSettings.CONST.SERVER_PASSPHRASE_SALT,
@@ -31,6 +32,7 @@ public class ServerSetting : IEndpointV1
private static readonly string[] GUARDED_INPUT = [
Server.Database.ServerSettings.CONST.JWT_CONFIG,
Server.Database.ServerSettings.CONST.PBKDF_CONFIG,
Server.Database.ServerSettings.CONST.PRELOAD_SETTINGS_HASH,
Server.Database.ServerSettings.CONST.SERVER_PASSPHRASE,
Server.Database.ServerSettings.CONST.SERVER_PASSPHRASE_SALT,
Server.Database.ServerSettings.CONST.SERVER_SSL_CERTIFICATE,