harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reviewed. This is OK.

Browse Source 
Revert "may be exploitable in current form - awaiting review"

This reverts commit 7bff60edac.
This commit is contained in:
zotlabs 2017-09-03 00:59:51 -07:00
parent 7bff60edac
commit 499b7de0d2
3 changed files with 1 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Zotlabs/Module/Cdav.php
View File

@ -64,8 +64,6 @@ class Cdav extends \Zotlabs\Web\Controller {
if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) { if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) {
$record = null; $record = null;
} }
// requires security review
$record = null;
if($record['account']) { if($record['account']) {
authenticate_success($record['account']); authenticate_success($record['account']);
if($channel_login) { if($channel_login) {

2
Zotlabs/Module/Dav.php
View File

@ -73,8 +73,6 @@ class Dav extends \Zotlabs\Web\Controller {
if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) { if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) {
$record = null; $record = null;
} }
// requires security review
$record = null;
if($record['account']) { if($record['account']) {
authenticate_success($record['account']); authenticate_success($record['account']);
if($channel_login) { if($channel_login) {

3
include/api_auth.php
View File

@ -85,8 +85,7 @@ function api_login(&$a){
else { else {
continue; continue;
} }
// requires security review
$record = null;
if($record) { if($record) {
$verified = \Zotlabs\Web\HTTPSig::verify('',$record['channel']['channel_pubkey']); $verified = \Zotlabs\Web\HTTPSig::verify('',$record['channel']['channel_pubkey']);
if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) { if(! ($verified && $verified['header_signed'] && $verified['header_valid'])) {