mirror of
https://github.com/yacy/yacy_search_server.git
synced 2024-09-19 00:01:41 +02:00
*) Bugfix for httpd security but
- authentication was only required for html files. See: http://www.yacy-forum.de/viewtopic.php?p=16510 git-svn-id: https://svn.berlios.de/svnroot/repos/yacy/trunk@1563 6c8d7289-2bf4-0310-a012-ef5d649a1542
This commit is contained in:
parent
8e55098b74
commit
2a88232cee
|
@ -301,7 +301,9 @@ public final class httpdFileHandler extends httpdAbstractHandler implements http
|
|||
// check permission/granted access
|
||||
String authorization = (String) requestHeader.get(httpHeader.AUTHORIZATION);
|
||||
String adminAccountBase64MD5 = switchboard.getConfig("adminAccountBase64MD5", "");
|
||||
if ((path.endsWith("_p.html")) && (adminAccountBase64MD5.length() != 0)) {
|
||||
int pos = path.lastIndexOf(".");
|
||||
|
||||
if ((path.substring(0,(pos==-1)?path.length():pos)).endsWith("_p") && (adminAccountBase64MD5.length() != 0)) {
|
||||
// authentication required
|
||||
|
||||
if (authorization == null) {
|
||||
|
|
Loading…
Reference in New Issue
Block a user