Ensure Install Wizard will only be displayed if the Master database connection string in appsettings.json is not specified. This addresses a potential security issue where the Install Wizard could be displayed in an existing installation if the Master database connection failed during startup.

2021-03-30 17:48:49 -04:00
parent 5cd1d3a7af
commit 09c040128a
8 changed files with 63 additions and 32 deletions
--- a/Oqtane.Server/Controllers/InstallationController.cs
+++ b/Oqtane.Server/Controllers/InstallationController.cs
@ -55,8 +55,7 @@ namespace Oqtane.Controllers
        [HttpGet("installed")]
        public Installation IsInstalled()
        {
-            bool isInstalled = _databaseManager.IsInstalled();
-            return new Installation {Success = isInstalled, Message = string.Empty};
+            return _databaseManager.IsInstalled();
        }

        [HttpGet("upgrade")]