Pterodactyl-Panel/routes
Dane Everitt e8dcd30e0c
[security] fix resources not properly returning an error when they don't match the server in the URL
Prior to this fix certain resources were accessible even when their assigned server was not the same as the server in the URL. This causes the resource server relationship to not match the server variable present on the request.

Due to this failed logic it was possible for users to access resources they should not have been able to access otherwise for some areas of the panel.
2021-01-19 21:19:17 -08:00
..
admin.php Remove all references of packs from the Panel 2020-09-13 11:13:37 -07:00
api-application.php Add endpoint to get all nodes meeting memory & disk requirements for a server; closes #1012 2021-01-10 13:08:43 -08:00
api-client.php [security] fix resources not properly returning an error when they don't match the server in the URL 2021-01-19 21:19:17 -08:00
api-remote.php Switch to s3 multipart uploads for backups 2020-11-01 15:27:43 -07:00
auth.php Fix recaptcha handling during login & password reset flows; closes #2064 2020-08-01 21:08:35 -07:00
base.php Block API access when 2FA is required on account; closes #2791 2020-12-06 13:56:14 -08:00
server.php Remove unused controllers 2020-03-22 15:15:42 -07:00