Whitelist additional read-only getters for untrusted connections

ruTorrent queries these commands for its settings and status pages.
They are all read-only getters with no side effects, safe to expose
for untrusted SCGI connections.

Tested against ruTorrent with both httprpc and multirpc plugins on
servers with active torrents — all modes (list, settings, totals,
open connections) work with zero blocked commands.
This commit is contained in:
Xirvik
2026-03-29 18:59:10 +00:00
committed by Jari Sundell
parent a0b8702895
commit 08a907b547
4 changed files with 30 additions and 0 deletions
+2
View File
@@ -180,4 +180,6 @@ initialize_command_tracker() {
rpc::rpc.mark_safe("dht.override_port");
rpc::rpc.mark_safe("dht.add_node");
rpc::rpc.mark_safe("dht.statistics");
rpc::rpc.mark_safe("trackers.numwant");
rpc::rpc.mark_safe("trackers.use_udp");
}