mirror of
https://github.com/blakeblackshear/frigate.git
synced 2026-07-15 16:31:14 +03:00
c2220c89a9
The /events/{id}/thumbnail endpoint called require_camera_access when
loading persisted events but skipped the check in the tracked-object
fallback path for in-progress events. A restricted viewer could
retrieve thumbnails from cameras they should not have access to.
|
||
|---|---|---|
| .. | ||
| defs | ||
| __init__.py | ||
| app.py | ||
| auth.py | ||
| camera.py | ||
| chat.py | ||
| classification.py | ||
| debug_replay.py | ||
| event.py | ||
| export.py | ||
| fastapi_app.py | ||
| media.py | ||
| motion_search.py | ||
| notification.py | ||
| preview.py | ||
| record.py | ||
| review.py | ||