Privileged can bypass blocks

DaoCloud · Sep 10, 2024 · fe16983 · fe16983
1 parent ebd40fc
commit fe16983
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/crproxy.go b/crproxy.go
@@ -531,7 +531,7 @@ func (c *CRProxy) ServeHTTP(rw http.ResponseWriter, r *http.Request) {
 		Name: info.Image,
 	}
 
-	if c.blockFunc != nil && c.blockFunc(imageInfo) {
+	if c.blockFunc != nil && !c.isPrivileged(r, nil) && c.blockFunc(imageInfo) {
 		if c.blockMessage != "" {
 			errcode.ServeJSON(rw, errcode.ErrorCodeDenied.WithMessage(c.blockMessage))
 		} else {