From bda63f0310e0c458e13e7a4e43ddfd73e56a4fd0 Mon Sep 17 00:00:00 2001 From: CalDescent Date: Wed, 30 Mar 2022 08:06:09 +0100 Subject: [PATCH] Removed hardcoded "qortal-backup/TradeBotStates.json" from POST /admin/repository/data API, as it's no longer needed now that API keys are required. --- src/main/java/org/qortal/api/resource/AdminResource.java | 4 ---- 1 file changed, 4 deletions(-) diff --git a/src/main/java/org/qortal/api/resource/AdminResource.java b/src/main/java/org/qortal/api/resource/AdminResource.java index 3fdc6dc4..277b5f00 100644 --- a/src/main/java/org/qortal/api/resource/AdminResource.java +++ b/src/main/java/org/qortal/api/resource/AdminResource.java @@ -588,10 +588,6 @@ public class AdminResource { public String importRepository(@HeaderParam(Security.API_KEY_HEADER) String apiKey, String filename) { Security.checkApiCallAllowed(request); - // Hard-coded because it's too dangerous to allow user-supplied filenames in weaker security contexts - if (Settings.getInstance().getApiKey() == null) - filename = "qortal-backup/TradeBotStates.json"; - try (final Repository repository = RepositoryManager.getRepository()) { ReentrantLock blockchainLock = Controller.getInstance().getBlockchainLock();