Ver Fonte

Restrict /setup and /wifi-setup in Play Only security mode

These pages were accessible even in Play Only mode, allowing someone to
change motor configuration or WiFi settings without the password.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
tuanchris há 4 meses atrás
pai
commit
63997d5d6b

+ 1 - 1
frontend/src/components/layout/Layout.tsx

@@ -682,7 +682,7 @@ export function Layout() {
   const isSecurityUnlocked = securityMode !== 'off' && hasSecurityPassword && isUnlocked
 
   // Redirect away from restricted pages if play_only is active and not unlocked
-  const restrictedPaths = ['/settings', '/table-control']
+  const restrictedPaths = ['/settings', '/table-control', '/setup', '/wifi-setup']
   useEffect(() => {
     if (isPlayOnlyActive && restrictedPaths.includes(location.pathname)) {
       navigate('/')

Diff do ficheiro suprimidas por serem muito extensas
+ 0 - 0
static/dist/assets/index-bDuzJAeR.js


+ 1 - 1
static/dist/index.html

@@ -58,7 +58,7 @@
           .catch(function() {});
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-DY6sbyJi.js"></script>
+    <script type="module" crossorigin src="/assets/index-bDuzJAeR.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-iGL2FzQP.css">
   <script id="vite-plugin-pwa:register-sw" src="/registerSW.js"></script></head>
   <body>

Diff do ficheiro suprimidas por serem muito extensas
+ 0 - 0
static/dist/sw.js


Alguns ficheiros não foram mostrados porque muitos ficheiros mudaram neste diff