Doorman 0.4.1 - security fix
Doorman v0.4.1 release addresses a security flaw in Doorman. When using an authentication backend, an unauthenticated user may access a node's osquery status logs by browsing directly to the HTTP endpoint at https://<hostname>/manage/node/<node id>/logs
.
- Added
@login_required
decorator to the node logs endpoint
Commits since last release
Commits to master since this release.