mirror of
https://git.proxmox.com/git/pve-manager
synced 2026-03-29 00:13:47 +00:00
metadata is gained using a HEAD request. Due to the ability of this api endpoint to request files on internal networks (which would not be visible/accessible from outside) it is restricted to users with permissions `Sys.Audit` and `Sys.Modify` on `/`. Users with these permissions are able to alter node (network) config anyway, so this should not create any further security risk. Signed-off-by: Lorenz Stechauner <l.stechauner@proxmox.com> Reviewed-By: Dominik Csapak <d.csapak@proxmox.com> |
||
|---|---|---|
| .. | ||
| API2 | ||
| Ceph | ||
| CLI | ||
| Service | ||
| Status | ||
| .gitignore | ||
| API2.pm | ||
| API2Tools.pm | ||
| APLInfo.pm | ||
| AutoBalloon.pm | ||
| CertCache.pm | ||
| CertHelpers.pm | ||
| ExtMetric.pm | ||
| HTTPServer.pm | ||
| Makefile | ||
| NodeConfig.pm | ||
| pvecfg.pm.in | ||
| Report.pm | ||
| VZDump.pm | ||