1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-01 03:02:43 +01:00
phorge-phorge/src/applications/pholio
epriestley e5b402d13f Lock all reply-handler options in the upstream, plus cookie prefix
Summary:
Ref T7185. These settings shouldn't be unlocked anywhere. Specifically:

  - `reply-handler`: These are on the way out.
  - `reply-handler-domain`: Also hopefully on the way out; locked because a compromised administrator account can redirect replies.
  - `phabricator.cookie-prefix`: Not dangerous per se, but an admin could have a hard time fixing this if they changed it by accident since their session would become invalid immediately.

Test Plan: Browsed Config.

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T7185

Differential Revision: https://secure.phabricator.com/D11764
2015-02-13 11:00:09 -08:00
..
application Remove getIconName from all applications 2015-01-30 12:11:21 -08:00
capability Simplify the implementation of PhabricatorPolicyCapability subclasses 2014-07-25 08:25:42 +10:00
config Lock all reply-handler options in the upstream, plus cookie prefix 2015-02-13 11:00:09 -08:00
constants Remove @group annotations 2014-07-10 08:12:48 +10:00
controller Increase visibility of PhabricatorController::buildApplicationMenu methods 2015-01-16 07:41:26 +11:00
edge Modernize Pholio edges 2015-01-02 10:11:41 +11:00
editor Add addLinkSection to MailBody to properly format URIs 2014-10-30 15:24:10 -07:00
event Replace Sprite-Icons with FontAwesome 2014-05-12 10:08:32 -07:00
lipsum Fix some linter violations 2015-01-03 09:11:41 +11:00
mail MetaMTA - update documentation and make config a tad easier 2015-02-12 11:05:39 -08:00
phid Rename PHIDType classes 2014-07-24 08:05:46 +10:00
query Policy - filter app engines where the user can't see the application from panel editing 2015-02-04 15:47:48 -08:00
remarkup Rename PhutilRemarkupRule subclasses 2014-08-05 00:55:43 +10:00
search Rename PHIDType classes 2014-07-24 08:05:46 +10:00
storage Fix visiblity of LiskDAO::getConfiguration() 2015-01-14 06:54:13 +11:00
view Don't show meme Remarkup hint button if Macro application is not usable 2014-11-24 15:25:25 -08:00