jeans/supervisor
jeans/supervisor
1
0
Fork 0
mirror of https://github.com/home-assistant/supervisor.git synced 2025-07-27 11:06:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix observer security filter (#3173)

Browse Source
This commit is contained in:
Joakim Sørensen 2021-09-30 15:12:04 +02:00 committed by GitHub
parent 2b4527fa64
commit 8240623806
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
supervisor/api/middleware/security.py
View File

@ -173,7 +173,7 @@ class SecurityMiddleware(CoreSysAttributes):
# Observer # Observer
if supervisor_token == self.sys_plugins.observer.supervisor_token: if supervisor_token == self.sys_plugins.observer.supervisor_token:
if not OBSERVER_CHECK.match(request.url): if not OBSERVER_CHECK.match(request.path):
_LOGGER.warning("%s invalid Observer access", request.path) _LOGGER.warning("%s invalid Observer access", request.path)
raise HTTPForbidden() raise HTTPForbidden()
_LOGGER.debug("%s access from Observer", request.path) _LOGGER.debug("%s access from Observer", request.path)