joachim/openwebrx-clone
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

don't redirect XHR calls to the login page, 403 instead

Browse Source
This commit is contained in:
Jakob Ketterl 2021-03-27 23:45:21 +01:00
parent df72147b93
commit 6796699e35
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
owrx/controllers/admin.py
View File

@ -36,5 +36,11 @@ class AuthorizationMixin(object):
if self.isAuthorized():
super().handle_request()
else:
target = "/login?{0}".format(parse.urlencode({"ref": self.request.path}))
self.send_redirect(target)
if (
"x-requested-with" in self.request.headers
and self.request.headers["x-requested-with"] == "XMLHttpRequest"
):
self.send_response("{}", code=403)
else:
target = "/login?{0}".format(parse.urlencode({"ref": self.request.path}))
self.send_redirect(target)