From d6104c8375aa431cd6e4cdb633eb4a3d94d847b7 Mon Sep 17 00:00:00 2001 From: Jan Prochazka Date: Thu, 28 Sep 2023 11:20:58 +0200 Subject: [PATCH] disabled shell scripting for NPM distribution by default --- packages/api/src/utility/platformInfo.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/api/src/utility/platformInfo.js b/packages/api/src/utility/platformInfo.js index 393edbfaf..d6af1323a 100644 --- a/packages/api/src/utility/platformInfo.js +++ b/packages/api/src/utility/platformInfo.js @@ -39,8 +39,8 @@ const platformInfo = { environment: process.env.NODE_ENV, platform, runningInWebpack: !!process.env.WEBPACK_DEV_SERVER_URL, - allowShellConnection: !processArgs.listenApiChild || !!process.env.SHELL_CONNECTION || !!isElectron(), - allowShellScripting: !processArgs.listenApiChild || !!process.env.SHELL_SCRIPTING || !!isElectron(), + allowShellConnection: (!processArgs.listenApiChild && !isNpmDist) || !!process.env.SHELL_CONNECTION || !!isElectron(), + allowShellScripting: (!processArgs.listenApiChild && !isNpmDist) || !!process.env.SHELL_SCRIPTING || !!isElectron(), defaultKeyfile: path.join(os.homedir(), '.ssh/id_rsa'), };