@@ -253,6 +253,11 @@ def inject_has_authorized_cookie():
@app.before_request
def require_system_password():
ip = request.access_route[0]
if is_ip_blocked(ip):
abort(403)
if request.endpoint is None:
return
The note is not visible to the blocked user.