Merge pull request #1521 from danielyxie/dev

fix exploit that enabled IPC
This commit is contained in:
hydroflame 2021-10-15 20:50:31 -04:00 committed by GitHub
commit de0d876638
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 8 additions and 3 deletions

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

@ -646,6 +646,11 @@ export function runScriptFromScript(
return 0;
}
args = args.map((arg) => {
if (typeof arg === "number") return arg;
return arg + ""; // force cast to string
});
// Check if the script is already running
const runningScriptObj = server.getRunningScript(scriptname, args);
if (runningScriptObj != null) {

@ -302,7 +302,7 @@ export function refreshTheme(): void {
border: "1px solid " + Settings.theme.well,
},
standardSuccess: {
color: Settings.theme.successLight,
color: Settings.theme.primaryLight,
},
standardError: {
color: Settings.theme.errorlight,