Security: Prevent leaking load average data

Prevent leaking load average data to non-logged in users.
This commit is contained in:
istiak101
2021-08-22 21:49:56 +06:00
committed by GitHub
parent 9df424a9fc
commit afe2bf605c

View File

@@ -75,6 +75,9 @@ def getSystemStatus(request):
return HttpResponse("Can not get admin Status") return HttpResponse("Can not get admin Status")
def getLoadAverage(request): def getLoadAverage(request):
try:
val = request.session['userID']
currentACL = ACLManager.loadedACL(val)
loadAverage = SystemInformation.cpuLoad() loadAverage = SystemInformation.cpuLoad()
loadAverage = list(loadAverage) loadAverage = list(loadAverage)
one = loadAverage[0] one = loadAverage[0]
@@ -83,6 +86,8 @@ def getLoadAverage(request):
loadAvg = {"one": one, "two": two,"three": three} loadAvg = {"one": one, "two": two,"three": three}
json_data = json.dumps(loadAvg) json_data = json.dumps(loadAvg)
return HttpResponse(json_data) return HttpResponse(json_data)
except KeyError:
return HttpResponse("Not allowed.")
@ensure_csrf_cookie @ensure_csrf_cookie
def versionManagment(request): def versionManagment(request):