oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

More spectre IP fixes

Browse source
This commit is contained in:
Graham Knop 2007-09-07 17:37:23 +00:00
parent 60cb86d9e0
commit 5a07fbef4c
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/WebGUI/Operation/Cron.pm
View file

@ -271,7 +271,7 @@ sub www_runCronJob {
my $session = shift; my $session = shift;
$session->http->setMimeType("text/plain"); $session->http->setMimeType("text/plain");
$session->http->setCacheControl("none"); $session->http->setCacheControl("none");
unless (isInSubnet($session->env->get("REMOTE_ADDR"), $session->config->get("spectreSubnets")) || canView($session)) { unless (isInSubnet($session->env->getIp, $session->config->get("spectreSubnets")) || canView($session)) {
$session->errorHandler->security("make a Spectre cron job runner request, but we're only allowed to accept requests from ".join(",",@{$session->config->get("spectreSubnets")})."."); $session->errorHandler->security("make a Spectre cron job runner request, but we're only allowed to accept requests from ".join(",",@{$session->config->get("spectreSubnets")}).".");
return "error"; return "error";
} }

2
lib/WebGUI/Operation/Workflow.pm
View file

@ -495,7 +495,7 @@ sub www_runWorkflow {
my $session = shift; my $session = shift;
$session->http->setMimeType("text/plain"); $session->http->setMimeType("text/plain");
$session->http->setCacheControl("none"); $session->http->setCacheControl("none");
unless (isInSubnet($session->env->get("REMOTE_ADDR"), $session->config->get("spectreSubnets")) || canRunWorkflow($session)) { unless (isInSubnet($session->env->getIp, $session->config->get("spectreSubnets")) || canRunWorkflow($session)) {
$session->errorHandler->security("make a Spectre workflow runner request, but we're only allowed to accept requests from ".join(",",@{$session->config->get("spectreSubnets")})."."); $session->errorHandler->security("make a Spectre workflow runner request, but we're only allowed to accept requests from ".join(",",@{$session->config->get("spectreSubnets")}).".");
return "error"; return "error";
} }