Skip to content

v1.7.4: require admin access for file pull API

Compare
Choose a tag to compare
@benhoyt benhoyt released this 03 Apr 03:59

This locks down the files "pull" API to require admin. Even though it's a read (GET), this meant any user could potentially read sensitive files.

Changelog since v1.7.3: v1.7.3...v1.7.4