From 36dc9f932dbe6ad14e529a39edc84ece0ed5074e Mon Sep 17 00:00:00 2001 From: Moe Alam Date: Fri, 19 Feb 2021 07:25:36 -0800 Subject: [PATCH] Fix Superuser Penetration Bug (properly) --- libs/auth.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libs/auth.js b/libs/auth.js index 17c7b4ed..1dbf7038 100644 --- a/libs/auth.js +++ b/libs/auth.js @@ -276,7 +276,7 @@ module.exports = function(s,config,lang){ success() } } - if(params.auth && JSON.stringify(s.superUsersApi).indexOf(params.auth) > -1){ + if(params.auth && Object.keys(s.superUsersApi).indexOf(params.auth) > -1){ userFound = true userSelected = s.superUsersApi[params.auth].$user foundUser()