From 4f3ef16c587e48792d5cd9df0e437c582b35f9fc Mon Sep 17 00:00:00 2001
From: Renovate Bot <bot@renovateapp.com>
Date: Mon, 25 Apr 2022 14:51:39 +0000
Subject: [PATCH 1/3] Update github/codeql-action action to v2

---
 .github/workflows/codeql-analysis.yml | 6 +++---
 .github/workflows/ossar-analysis.yml  | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 1a27960..175aea9 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -43,7 +43,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -54,7 +54,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2
diff --git a/.github/workflows/ossar-analysis.yml b/.github/workflows/ossar-analysis.yml
index c47834d..31aeb4e 100644
--- a/.github/workflows/ossar-analysis.yml
+++ b/.github/workflows/ossar-analysis.yml
@@ -35,6 +35,6 @@ jobs:
 
       # Upload results to the Security tab
     - name: Upload OSSAR results
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.ossar.outputs.sarifFile }}

From 84188f1bab90bf7fb50fb29361a168653623a7f2 Mon Sep 17 00:00:00 2001
From: Matteo Gheza <matteo.gheza07@gmail.com>
Date: Fri, 27 May 2022 08:10:53 +0200
Subject: [PATCH 2/3] Update apiRouter.php

---
 backend/apiRouter.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/apiRouter.php b/backend/apiRouter.php
index e2d321a..3e310d6 100644
--- a/backend/apiRouter.php
+++ b/backend/apiRouter.php
@@ -227,7 +227,7 @@ function apiRouter (FastRoute\RouteCollector $r) {
         function ($vars) {
             global $users;
             requireLogin();
-            if(!$users->hasRole(Role::SUPER_EDITOR) && $_POST["id"] !== $users->auth->getUserId()){
+            if(!$users->hasRole(Role::SUPER_EDITOR)){
                 exit;
             }
             apiResponse(["userId" => $users->add_user($_POST["email"], $_POST["name"], $_POST["username"], $_POST["password"], $_POST["phone_number"], $_POST["birthday"], $_POST["chief"], $_POST["driver"], $_POST["hidden"], $_POST["disabled"], "unknown")]);

From 63086ee05dd26ce07be1331554e11f82c3fbafbd Mon Sep 17 00:00:00 2001
From: Matteo Gheza <matteo.gheza07@gmail.com>
Date: Fri, 27 May 2022 18:30:17 +0200
Subject: [PATCH 3/3] Update list.component.ts

---
 frontend/src/app/_routes/list/list.component.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/frontend/src/app/_routes/list/list.component.ts b/frontend/src/app/_routes/list/list.component.ts
index 691c663..0c82112 100644
--- a/frontend/src/app/_routes/list/list.component.ts
+++ b/frontend/src/app/_routes/list/list.component.ts
@@ -136,7 +136,10 @@ export class ListComponent implements OnInit, OnDestroy {
   requestTelegramToken() {
     this.api.post("telegram_login_token", {}).then((response) => {
       console.log(response);
-      window.open(response.start_link, "_blank");
+      const a = document.createElement("a");
+      a.setAttribute('href', response.start_link);
+      a.setAttribute('target', '_blank');
+      a.click();
     });
   }