1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 11:16:47 +00:00
webvirtcloud/appsettings
catborise b0df124601 fix(appsettings): SASS_DIR must be a directory inside the project
The settings page lists the themes of SASS_DIR and writes wvc-main.scss
into it when the theme changes; the value could be any path, so a
superuser could make the app list and write files anywhere it may
(CodeQL py/path-injection).

SASS_DIR is now accepted only if it resolves to an existing directory
inside the project (the default is dev/scss). A stored value outside it
is not used: the page shows an error and offers no themes, so nothing
is written. Installations that keep their SCSS outside the project
need to move it under it.

The tests fail on the previous code for an absolute path, "../",
a path climbing out and a missing directory, and for a stored value
outside the project.
2026-10-06 08:48:51 +03:00
..
migrations feat(console): VNC is the only console type 2026-10-04 01:08:11 +03:00
templates Bootstrap5 (#17) 2021-07-07 14:12:38 +03:00
__init__.py Add Settings page: Move theme & lang changer to settings page 2020-06-04 12:03:26 +03:00
apps.py fix: track migrations; installs apply them instead of generating them 2026-10-04 01:08:11 +03:00
context_processors.py Some improvements for appsettings app 2020-06-17 15:15:58 +06:00
middleware.py ci: replace super-linter with ruff 2026-10-04 01:08:11 +03:00
models.py format python code with black 2022-11-02 08:54:35 +03:00
settings.py Accounts app improvements and tests 2020-10-14 14:25:05 +03:00
test_appsettings.py ci: replace super-linter with ruff 2026-10-04 01:08:11 +03:00
test_theme_name.py fix(appsettings): SASS_DIR must be a directory inside the project 2026-10-06 08:48:51 +03:00
tests.py ci: replace super-linter with ruff 2026-10-04 01:08:11 +03:00
views.py fix(appsettings): SASS_DIR must be a directory inside the project 2026-10-06 08:48:51 +03:00