mirror of
https://github.com/frappe/lms.git
synced 2026-04-21 15:48:00 +03:00
fix: only block endpoints if enabled in site config
This commit is contained in:
@@ -46,6 +46,9 @@ ALLOWED_PATHS = [
|
||||
|
||||
|
||||
def authenticate():
|
||||
if not frappe.conf.get("block_endpoints"):
|
||||
return
|
||||
|
||||
if frappe.form_dict.cmd:
|
||||
path = f"/api/method/{frappe.form_dict.cmd}"
|
||||
else:
|
||||
|
||||
Reference in New Issue
Block a user