Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
erp5 erp5
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Labels
    • Labels
  • Merge requests 142
    • Merge requests 142
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Environments
  • Analytics
    • Analytics
    • CI/CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • nexedi
  • erp5erp5
  • Merge requests
  • !194

Closed
Created Nov 08, 2016 by Sebastien Robin@sebContributor
  • Report abuse
Report abuse

testnode: disallow frontend access to all folders, avoiding publishing private repositories

  • Overview 7
  • Commits 1
  • Changes 2

The current status of testnode is quite dangerous. If we release a new version and we start using it, all private repositories are going to be publicly available through testnode frontends, like explained in https://nexedi.erp5.net/web_page_module/6035.

To avoid such issue, Julien and me would like to disable any access by default. Access would be enabled for now only when a "test-url" is given in test suite parameters. So this should not break the very few test suites using remote web browsers, and such test suites must use public repositories. We will see later how to do better, it is just a first step to avoid exposing all private code.

/cc @jm @Tyagov @rafael

Assignee
Assign to
Reviewer
Request review from
None
Milestone
None
Assign milestone
Time tracking
Source branch: testnode
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7