frodovdr
/
node-red
mirror of https://github.com/node-red/node-red.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Do not tie debug src loading to needsPermission 

Fixes #1111
This commit is contained in:
Nick O'Leary 2017-01-10 09:43:46 +00:00
parent 75855d5450
commit ce6594c8cc
No known key found for this signature in database
GPG Key ID: 4F2157149161A6C9
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nodes/core/core/58-debug.js
View File

@ -189,7 +189,9 @@ module.exports = function(RED) {
}
});
RED.httpAdmin.get("/debug/view/*",RED.auth.needsPermission("debug.read"),function(req,res) {
// As debug/view/debug-utils.js is loaded via <script> tag, it won't get
// the auth header attached. So do not use RED.auth.needsPermission here.
RED.httpAdmin.get("/debug/view/*",function(req,res) {
var options = {
root: __dirname + '/lib/debug/',
dotfiles: 'deny'