pfSense/pfsense bdbd853 — src/etc/inc auth_func.inc
Privilege matching -- allow JS anchors. Fixes #9550 Attempts to detect a special case where a file does not actually exist, and yet should be allowed since it is used by JavaScript. So long as the anchor name doesn't contain any characters that might let it evade other checks, allow it through.
Delta | File | |
---|---|---|
+10 | -0 | src/etc/inc/auth_func.inc |
+10 | -0 | 1 files |