From ddb337847ed1541fb0e010aa0a7b7f5ab68a6238 Mon Sep 17 00:00:00 2001 From: Max Date: Tue, 24 Sep 2024 08:00:05 +0800 Subject: [PATCH] Refactor request guard to include page backend script execution --- sui/api/request.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sui/api/request.go b/sui/api/request.go index 567a693e..bd442e38 100644 --- a/sui/api/request.go +++ b/sui/api/request.go @@ -311,6 +311,9 @@ func (r *Request) Guard(c *core.Cache) (int, error) { if c.GuardRedirect != "" { redirect := c.GuardRedirect data := core.Data{} + // Here may have a security issue, should be refector, in the future. + // Copy the script pointer to the request For page backend script execution + r.Request.Script = c.Script if c.Data != "" { data, err = r.Request.ExecString(c.Data) if err != nil {