Mirrors/blakeblackshear.frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2026-04-19 23:08:08 +02:00
Code Issues Projects Releases Wiki Activity

Restrict /api/config/raw to admin role to prevent credential leak to non-admin users (#22523)

Browse Source
This commit is contained in:
Josh Hawkins
2026-03-18 17:14:59 -05:00
committed by GitHub
parent ae9b307dfc
commit e78da2758d
2 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
frigate/api/auth.py
View File

@@ -67,7 +67,6 @@ def require_admin_by_default():
"/stats",
"/stats/history",
"/config",
"/config/raw",
"/vainfo",
"/nvinfo",
"/labels",