search

FriendsOfShopware / FroshProfiler

This plugin allows you to profile your Shopware 5 application
MIT License
157 stars 41 forks source link

Profiler reachable also if ip not on whitelist #63

Closed Consoles4You closed 6 years ago

Consoles4You commented 6 years ago

The profiler is always reachable under: "host base_url /profiler".

This should not be possible if the whitelist function is enabled, otherwise critical data might be accessed by non authorized users.

shyim commented 6 years ago

Fixed with new version 1.1.6