xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-05 12:37:56 +00:00
Code Issues Projects Releases Wiki Activity

Further tighten routing for "special" cases

Browse Source 
Mitigate risk of misdirection through more explicit routing rules.
This commit is contained in:
Jarrod Johnson
2026-07-08 11:56:48 -04:00
parent c9adc7690a
commit e41a844aa3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confluent_server/confluent/httpapi.py
+3 -3
View File
@@ -864,7 +864,7 @@ async def resourcehandler_backend(req, make_response):
await rsp.write(b'Our princess is in another castle!')
return rsp
elif (operation == 'create' and ('/console/session' in reqpath or
'/shell/sessions/' in reqpath)) and (reqpath.startswith('/nodes/') or reqpath.startswith('/noderange/')):
'/shell/sessions/' in reqpath)) and (reqpath.startswith(('/nodes/', '/noderange/'))):
if '/console/session' in reqpath:
prefix, _, _ = reqpath.partition('/console/session')
shellsession = False
@@ -949,7 +949,7 @@ async def resourcehandler_backend(req, make_response):
return rsp
else: # no keys, but a session, means it's hooking to receive data
raise Exception("long polling console sessions are discontinued")
elif (operation == 'create' and ('/firmware/updates/active' in reqpath)):
elif (operation == 'create' and ('/firmware/updates/active' in reqpath)) and (reqpath.startswith(('/nodes/', '/noderange/'))):
if 'application/json' in reqtype:
if not isinstance(reqbody, str):
reqbody = reqbody.decode('utf8')
@@ -969,7 +969,7 @@ async def resourcehandler_backend(req, make_response):
rsp = await make_response(mimetype, 200, 'OK')
await rsp.write(json.dumps({'data': nodeurls}).encode('utf8'))
return rsp
elif (operation == 'create' and ('/staging' in reqpath)):
elif (operation == 'create' and (reqpath.startswith('/staging'))):
url = reqpath
args_dict = {}
content_length = int(req.content_length)