From fc4e2477d1a3bf9f702660bf2892cf5b529e4125 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= Date: Wed, 7 Oct 2015 23:09:21 +0200 Subject: [PATCH] misc: don't add new backoffice directories to _q_exports (#8550) This brings a bypass of the _q_lookup call and the security checks are therefore skipped. --- wcs/qommon/backoffice/root.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/wcs/qommon/backoffice/root.py b/wcs/qommon/backoffice/root.py index 4b70414..9e445d9 100644 --- a/wcs/qommon/backoffice/root.py +++ b/wcs/qommon/backoffice/root.py @@ -39,8 +39,6 @@ from qommon.storage import atomic_write class BackofficeRootDirectory(AccessControlled, Directory): def register_directory(cls, urlname, directory): - if not urlname in cls._q_exports: - cls._q_exports.append(urlname) setattr(cls, urlname, directory) register_directory = classmethod(register_directory) -- 2.6.1