Skip to content

Commit 3f1b8aa

Browse files
committed
disabled authentification for updating transpiled files (possible security issue... maybe we should not update them in the first place if not authentifcated)
SQUASHED: disabled-authentification-for-updating-transpiled-files,
1 parent 222f534 commit 3f1b8aa

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/client/fetch.js

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,8 @@ export async function installAuthorizedFetch() {
140140
}
141141
}
142142

143-
if (isWriting && baseUrlsAuthNeededForWriting.find(ea => url.startsWith(ea))) {
143+
if (isWriting && baseUrlsAuthNeededForWriting.find(
144+
ea => url.startsWith(ea) && !url.startsWith(lively4url + "/.transpiled/") )) {
144145
return {
145146
result: (async () => {
146147
console.log("AuthorizedFetch Write: " + url)

0 commit comments

Comments
 (0)