Don't leak to non-admin users the current installed version

This commit is contained in:
jvoisin 2020-10-29 14:03:18 +01:00
parent 5792838333
commit 8b60a19577

View File

@ -1029,7 +1029,8 @@ def send_logfile(logtype):
@admi.route("/get_update_status", methods=['GET'])
@login_required_if_no_ano
@login_required
@admin_required
def get_update_status():
log.info(u"Update status requested")
return updater_thread.get_available_updates(request.method, locale=get_locale())