Don't allow add-on to update itself (#733)

This commit is contained in:
Pascal Vizeli 2018-10-01 15:22:26 +02:00 committed by GitHub
parent dccc652d42
commit 36cdb05387
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -32,7 +32,7 @@ NO_SECURITY_CHECK = re.compile(
# Can called by every add-on # Can called by every add-on
ADDONS_API_BYPASS = re.compile( ADDONS_API_BYPASS = re.compile(
r"^(?:" r"^(?:"
r"|/addons/self/(?!security)[^/]+" r"|/addons/self/(?!security|update)[^/]+"
r"|/version" r"|/version"
r"|/services.*" r"|/services.*"
r"|/discovery.*" r"|/discovery.*"