3D-printing/Cura
1
0
Fork 0
mirror of https://github.com/Ultimaker/Cura.git synced 2025-11-02 20:52:20 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Refuse to listen to QT_PLUGIN_PATH.

Browse source 
We don't need it ourselves, and it's a potentially serious attack vector.

CURA-8475
This commit is contained in:
Remco Burema 2022-01-07 19:12:36 +01:00
parent 25ec588754
commit c849cf8e88
No known key found for this signature in database
GPG key ID: 215C49431D43F98C
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
cura_app.py
View file

@ -15,6 +15,7 @@ if "" in sys.path:
import argparse import argparse
import faulthandler import faulthandler
import os import os
os.environ["QT_PLUGIN_PATH"] = "" # Security workaround: Don't need it, and introduces an attack vector, so set to nul.
from PyQt5.QtNetwork import QSslConfiguration, QSslSocket from PyQt5.QtNetwork import QSslConfiguration, QSslSocket