3D-printing/Cura
1
0
Fork 0
mirror of https://github.com/Ultimaker/Cura.git synced 2025-11-02 20:52:20 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Secure another 'environment-settable via Qt' DLL.

Browse source 
SEC-258 a.k.a. CURA-8969
This commit is contained in:
Remco Burema 2022-05-17 11:42:43 +02:00
parent 97d20bff1b
commit bf9c3cbc83
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
cura_app.py
View file

@ -18,6 +18,7 @@ import os
if sys.platform != "linux": # Turns out the Linux build _does_ use this, but we're not making an Enterprise release for that system anyway.
os.environ["QT_PLUGIN_PATH"] = "" # Security workaround: Don't need it, and introduces an attack vector, so set to nul.
os.environ["QML2_IMPORT_PATH"] = "" # Security workaround: Don't need it, and introduces an attack vector, so set to nul.
os.environ["QT_OPENGL_DLL"] = "" # Security workaround: Don't need it, and introduces an attack vector, so set to nul.
from PyQt5.QtNetwork import QSslConfiguration, QSslSocket