github-starred/burp-ui
2
0
Fork 0
mirror of https://github.com/ziirish/burp-ui.git synced 2026-05-15 14:16:08 -06:00
Code Issues 1 Projects Packages Wiki Activity Actions

properly handle acl order and exclude (fix #327)

Browse source
This commit is contained in:
ziirish 2020-01-20 23:05:29 +01:00
parent c6a74ecbb9
commit f19162a758
No known key found for this signature in database
GPG key ID: 72DB229A64B54E46
1 changed files with 11 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

19
burpui/misc/acl/meta.py
View file

@ -595,15 +595,18 @@ class BUIgrantHandler(BUImetaGrant, BUIacl):
return False
order = _extract_key(adv, 'order', None, DEFAULT_EVAL_ORDER)
excludes = _extract_key(adv, 'exclude', None)
advanced = self._extract_advanced(username)
if advanced:
for adv in advanced:
order = _extract_key(adv, 'order', None, DEFAULT_EVAL_ORDER)
excludes = _extract_key(adv, 'exclude', None)
for odr in order:
if odr == 'exclude' and client_match and (
any(x in excludes for x in client_match) or
_glob_match(excludes, client, self.opt('extended'))):
return False
return client_match is not False or is_admin
for odr in order:
if odr == 'exclude' and client_match and (
any(x in excludes for x in client_match) or
_glob_match(excludes, client, self.opt('extended'))):
return False
return client_match is not False or is_admin
def is_server_rw(self, username=None, server=None):
"""See :func:`burpui.misc.acl.interface.BUIacl.is_server_rw`"""