Dont allow users to update loot.data

2019-01-16 10:01:22 -06:00 · 2019-01-16 10:01:22 -06:00 · d6462fed63
parent dc7d611780
commit d6462fed63
1 changed files with 1 additions and 0 deletions
--- a/lib/msf/core/db_manager/loot.rb
+++ b/lib/msf/core/db_manager/loot.rb
@ -99,6 +99,7 @@ module Msf::DBManager::Loot
  def update_loot(opts)
    ::ActiveRecord::Base.connection_pool.with_connection {
      wspace = Msf::Util::DBManager.process_opts_workspace(opts, framework, false)
+      raise ArgumentError, "Updating the data attribute is not allowed." if opts[:data]
      opts[:workspace] = wspace if wspace

      id = opts.delete(:id)