aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-18 22:44:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix access to unreleased challenges through /chals/<id> endpoint (#689)

Browse Source
This commit is contained in:
Benno Evers
2018-10-06 10:29:30 +02:00
committed by Kevin Chung
parent 14ea952a2a
commit 41933cc367
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CTFd/challenges.py
View File

@@ -133,6 +133,8 @@ def chal_view(chal_id):
teamid = session.get('id') teamid = session.get('id')
chal = Challenges.query.filter_by(id=chal_id).first_or_404() chal = Challenges.query.filter_by(id=chal_id).first_or_404()
if chal.hidden:
abort(404)
chal_class = get_chal_class(chal.type) chal_class = get_chal_class(chal.type)
tags = [tag.tag for tag in Tags.query.add_columns('tag').filter_by(chal=chal.id).all()] tags = [tag.tag for tag in Tags.query.add_columns('tag').filter_by(chal=chal.id).all()]