almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-04-28 09:52:37 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

Do not allow uploading the token as an asset

Browse source
This commit is contained in:
Alexis Métaireau 2024-07-08 20:48:27 +02:00 committed by Alex Pyrgiotis
parent e87547d3a6
commit df3f8f7cb5
No known key found for this signature in database
GPG key ID: B6C15EBA0357C9AA
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
dev_scripts/upload-asset.py
View file

@ -104,6 +104,8 @@ def main():
if args.token:
log.debug(f"Reading token from {args.token}")
# Ensure we are not uploading the token as an asset
assert args.file != args.token
with open(args.token) as f:
token = f.read().strip()
else: