security hazard; access to self on searchCriteria

2004-09-20 08:17:58 +00:00 · 2004-09-20 08:17:58 +00:00 · feb0c94e79
parent 96ace1f7dd
commit feb0c94e79
1 changed files with 2 additions and 1 deletions
--- a/shared/server/ObjectsServer.py
+++ b/shared/server/ObjectsServer.py
@ -2311,7 +2311,8 @@ class ObjectsServer(AdministrableServerMixin, Server):
                continue
            try:
                if eval(criteria, {'object': objectCore,
-                                   'result': result}, {}):
+                                   'result': result,
+                                   'self': self}, {}):
                    result.append(objectId)
            except Exception, e:
                pass