disabled authentification for updating transpiled files (possible security issue... maybe we should not update them in the first place if not authentifcated)

JensLincke · JensLincke · commit 3f1b8aabd004 · 2021-02-15T18:53:47.000+01:00
SQUASHED: disabled-authentification-for-updating-transpiled-files,
diff --git a/src/client/fetch.js b/src/client/fetch.js
@@ -140,7 +140,8 @@ export async function installAuthorizedFetch() {
         }          
       }
       
-      if  (isWriting && baseUrlsAuthNeededForWriting.find(ea => url.startsWith(ea))) {
+      if  (isWriting && baseUrlsAuthNeededForWriting.find(
+          ea => url.startsWith(ea) && !url.startsWith(lively4url + "/.transpiled/")  )) {
         return {
             result: (async () => {
               console.log("AuthorizedFetch Write: " + url)

Original file line number	Diff line number	Diff line change
`@@ -140,7 +140,8 @@ export async function installAuthorizedFetch() {`
`140`	`140`	`}`
`141`	`141`	`}`
`142`	`142`
`143`		`- if (isWriting && baseUrlsAuthNeededForWriting.find(ea => url.startsWith(ea))) {`
	`143`	`+ if (isWriting && baseUrlsAuthNeededForWriting.find(`
	`144`	`+ ea => url.startsWith(ea) && !url.startsWith(lively4url + "/.transpiled/") )) {`
`144`	`145`	`return {`
`145`	`146`	`result: (async () => {`
`146`	`147`	`console.log("AuthorizedFetch Write: " + url)`