Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hide sensitive content on admin panel progress monitor (#19218 & #19226) #19231

Merged
merged 3 commits into from
Mar 27, 2022

Conversation

lunny
Copy link
Member

@lunny lunny commented Mar 27, 2022

Backport #19218
Backport #19226

Sanitize urls within git process descriptions & skip global arguments.

Co-authored-by: wxiaoguang [email protected]
Co-authored-by: Andrew Thornton [email protected]

Sanitize urls within git process descriptions.

Co-authored-by: wxiaoguang <[email protected]>
Co-authored-by: Andrew Thornton <[email protected]>
@lunny lunny added the type/bug label Mar 27, 2022
@lunny lunny added this to the 1.16.6 milestone Mar 27, 2022
@lunny lunny added the topic/security Something leaks user information or is otherwise vulnerable. Should be fixed! label Mar 27, 2022
@GiteaBot GiteaBot added the lgtm/need 1 This PR needs approval from one additional maintainer to be merged. label Mar 27, 2022
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Mar 27, 2022
Copy link
Contributor

@zeripath zeripath left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't the complete backport - I'll merge the changes back in

Backport go-gitea#19226

The git command by default adds a number of global arguments. These are not
helpful to be displayed in the process manager and so should be skipped for
default process descriptions.

Signed-off-by: Andrew Thornton <[email protected]>
@zeripath zeripath changed the title Hide sensitive content on admin panel progress monitor (#19218) Hide sensitive content on admin panel progress monitor (#19218 & #19226) Mar 27, 2022
modules/git/command.go Outdated Show resolved Hide resolved
@zeripath
Copy link
Contributor

make lgtm work

@zeripath zeripath merged commit 540541c into go-gitea:release/v1.16 Mar 27, 2022
@lunny lunny deleted the lunny/hide_process_sensitive2 branch March 28, 2022 02:31
@go-gitea go-gitea locked and limited conversation to collaborators Apr 28, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. topic/security Something leaks user information or is otherwise vulnerable. Should be fixed! type/bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants