vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 4

Merge pull request #8171 from surajshetty3416/fix-security-p

Browse source 
fix(security): Remove 'ignore_permissions' in form_dict
This commit is contained in:
mergify[bot] 2019-08-13 07:50:36 +00:00 • committed by GitHub
commit 7b7d510e20
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
frappe/desk/reportview.py
View file

@ -30,6 +30,7 @@ def get_form_params():
data.pop('cmd', None)
data.pop('data', None)
data.pop('ignore_permissions', None)
if "csrf_token" in data:
del data["csrf_token"]