Skip to content

Commit

Permalink
fix(dropdownfield): disable recursivity
Browse files Browse the repository at this point in the history
Should not be enabled, and breaks IDOR check in GLPI

Signed-off-by: Thierry Bugier <tbugier@teclib.com>
  • Loading branch information
btry committed Mar 8, 2021
1 parent ea4ddfc commit daa7fb0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion inc/field/dropdownfield.class.php
Original file line number Diff line number Diff line change
Expand Up @@ -205,7 +205,7 @@ public function buildParams($rand = null) {
'display' => false,
'comments' => false,
'entity' => $form->fields['entities_id'],
'entity_sons' => (bool) $form->isRecursive(),
//'entity_sons' => (bool) $form->isRecursive(),
'displaywith' => ['id'],
];

Expand Down

0 comments on commit daa7fb0

Please sign in to comment.