klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-11 02:36:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Unauthenticated Arbitrary File Upload in SQLBot uploadExcel Endpoint

Browse Source
This commit is contained in:
junjun
2025-12-08 10:57:24 +08:00
committed by Junjun
parent 71e9f1fe38
commit 1ba4a7c561
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/common/utils/whitelist.py
-1
View File
@@ -33,7 +33,6 @@ wlist = [
"/system/assistant/info/*",
"/system/assistant/app/*",
"/system/assistant/picture/*",
"/datasource/uploadExcel",
"/system/authentication/platform/status",
"/system/authentication/login/*",
"/system/authentication/sso/*",