mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-06-11 09:07:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix access control in rss and opml actions (#8912)

Browse Source 
Due to missing `return` statement while using `redirect: false`, no `exit()` is done during `Minz_Error::error()`

Regression from https://github.com/FreshRSS/FreshRSS/pull/8434
This commit is contained in:
Inverle
2026-06-05 22:38:17 +02:00
committed by GitHub
parent aaae9ee388
commit bf2de1baea
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/Controllers/indexController.php
View File

@@ -251,6 +251,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController {
// Check if user has access.
if (!FreshRSS_Auth::hasAccess() && !$allow_anonymous && !Minz_Request::tokenIsOk()) {
Minz_Error::error(403, redirect: false);
return;
}
try {
@@ -287,6 +288,7 @@ class FreshRSS_index_Controller extends FreshRSS_ActionController {
// Check if user has access.
if (!FreshRSS_Auth::hasAccess() && !$allow_anonymous && !Minz_Request::tokenIsOk()) {
Minz_Error::error(403, redirect: false);
return;
}
try {