[s] Disallow href_tokens from being able to be read (#90667)

This commit is contained in:
Jordan Dominion
2025-04-18 03:55:03 -04:00
committed by GitHub
parent 3d8d9f8272
commit 0356f63208

View File

@@ -21,9 +21,10 @@ GLOBAL_PROTECT(href_token)
var/spamcooldown = 0
///Randomly generated signature used for security records authorization name.
///Randomly generated signature used for security records authorization name. Not code security critical
var/admin_signature
/// Code security critcal token used for authorizing href topic calls
var/href_token
/// Link from the database pointing to the admin's feedback forum
@@ -82,6 +83,11 @@ GLOBAL_PROTECT(href_token)
QDEL_NULL(path_debug)
return ..()
/datum/admins/can_vv_get(var_name)
if(var_name == NAMEOF(src, href_token))
return FALSE
return ..()
/datum/admins/proc/activate()
if(IsAdminAdvancedProcCall())
alert_to_permissions_elevation_attempt(usr)