security: Setting global settings requires approval.

2024-11-30 16:58:48 -05:00
parent cd2c2587ae
commit 8e0d91dcf5
2 changed files with 2 additions and 0 deletions
--- a/core/core.js
+++ b/core/core.js
@ -419,6 +419,7 @@ async function getProcessBlob(blobId, key, options) {
 					return settings?.[key];
 				};
 				imports.core.globalSettingsSet = async function (key, value) {
+					await imports.core.permissionTest('set_global_setting');
 					print('Setting', key, value);
 					let settings = await loadSettings();
 					settings[key] = value;