2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

now really fix information disclosure

Browse source
This commit is contained in:
Laura Klünder 2016-12-24 02:46:05 +01:00
parent 63d50560ef
commit affe2934ee
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/c3nav/mapdata/models/locations.py
View file

@ -304,7 +304,7 @@ class PointLocation(Location):
graph = Graph.load()
point = graph.get_nearest_point(self.level, self.x, self.y)
if point is None or (':nonpublic' in point.arealocations and self.request.c3nav_full_access and
if point is None or (':nonpublic' in point.arealocations and not self.request.c3nav_full_access and
not len(set(self.request.c3nav_access_list) & set(point.arealocations))):
return _('Unreachable Coordinates'), ''