vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 4

fix(security): fix(security): Remove 'ignore_permissions' from in form_dict

Browse source
This commit is contained in:
Suraj Shetty 2019-08-12 21:25:37 +05:30
parent d9143a13ce
commit 9ae4100836
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
frappe/desk/reportview.py
View file

@ -30,6 +30,7 @@ def get_form_params():
data.pop('cmd', None)
data.pop('data', None)
data.pop('ignore_permissions', None)
if "csrf_token" in data:
del data["csrf_token"]