1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-13 10:22:42 +01:00
phorge-phorge/src/applications
epriestley 69399dfc2a Remove phpast.* Conduit methods
Summary:
Ref T4592. These were added with the intent of not requiring builds on Windows, but then we got builds on Windows working and they seem to be straightforward. See T4592 for most recent discussion.

Remove these methods because they aren't really practical for anything and increase attack surface area by giving adversaries access to `xhpast`, and generally bloat up the Conduit API. To my knowledge, nothing has ever called them.

(If an install somehow relies on these, they can drop them into `src/extensions/` to expose them again.)

Test Plan: Viewed conduit.

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: aran, epriestley

Maniphest Tasks: T4592

Differential Revision: https://secure.phabricator.com/D8500
2014-03-12 11:30:22 -07:00
..
arcanist/conduit Move Conduit methods inside applications 2012-12-21 12:21:59 -08:00
audit Adding author information to AuditListView 2014-03-07 08:40:35 -08:00
auth Whitelist controllers which can receive a 'code' parameter 2014-03-12 11:30:04 -07:00
base Whitelist controllers which can receive a 'code' parameter 2014-03-12 11:30:04 -07:00
cache Minor, mark SERIALIZATION_PHP fields as BINARY in Lisk 2014-02-23 16:35:51 -08:00
calendar Make "My Events" default on Calendar 2014-03-05 08:24:45 -08:00
chatlog Various linter fixes. 2014-02-26 12:44:58 -08:00
conduit Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
config Remove DifferentialFieldSelector 2014-03-11 13:02:13 -07:00
conpherence Fix three minor edge case behaviors in Conpherence 2014-03-10 16:21:28 -07:00
countdown [Countdown] fix undefined variable errors 2014-02-05 05:33:31 -08:00
daemon Do not perform write in PhabricatorDaemonLogQuery by default 2014-01-21 14:04:12 -08:00
dashboard Add edit/view plumbing for dashboards and panels 2014-02-03 10:52:15 -08:00
differential Restore old "author can not be a reviewer" rule to Transactions 2014-03-12 06:04:30 -07:00
diffusion Diffusion - add ToC for readme files 2014-03-11 15:52:16 -07:00
diviner Minor improvements to Diviner layout 2014-03-10 17:59:13 -07:00
doorkeeper Move PhabricatorTagView to PHUITagView 2014-01-14 14:09:52 -08:00
draft/storage Differential - add DifferentialDraft to track whether revisions have draft feedback or not 2014-02-18 16:25:16 -08:00
drydock Various linter fixes. 2014-02-26 12:44:58 -08:00
fact Extend all "ManagementWorkflow" classes from a base class 2013-12-27 13:15:40 -08:00
feed Fail feed story renders individually, instead of in aggregate 2014-03-10 18:22:24 -07:00
files Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
flag Various linter fixes. 2014-02-26 12:44:58 -08:00
harbormaster Truncate logSource in Harbormaster to the database column limit 2014-03-07 17:43:46 -08:00
help/controller Make Differential views capability-sensitive 2013-09-26 18:45:04 -07:00
herald [herald] Add support for Arcanist Project as a field for Differential revisions 2014-03-11 13:15:14 -07:00
home Remove field selector on Diff view and Revision List View 2014-03-11 13:02:10 -07:00
legalpad Maniphest Tasks + Project Boards - some polish 2014-03-04 17:01:33 -08:00
lipsum Use DifferentialRevisionEditor in lipsum 2014-03-11 13:02:00 -07:00
macro Maniphest Tasks + Project Boards - some polish 2014-03-04 17:01:33 -08:00
mailinglists Extract textual object list parsing from Differential 2014-03-07 17:44:44 -08:00
maniphest Workboards - add task create + improve task placement wrt priority edits 2014-03-05 18:40:28 -08:00
meta Various linter fixes. 2014-02-26 12:44:58 -08:00
metamta Port Differential mail features forward to transactions 2014-03-11 13:02:06 -07:00
notification Add a "Send Test Notification" button to make testing the server easier 2014-02-17 16:00:33 -08:00
nuance Various linter fixes. 2014-02-26 12:44:58 -08:00
oauthserver Whitelist controllers which can receive a 'code' parameter 2014-03-12 11:30:04 -07:00
owners Various linter fixes. 2014-02-26 12:44:58 -08:00
passphrase Passphrase - added "looked at secret" transaction. 2014-02-25 14:58:30 -08:00
paste Maniphest Tasks + Project Boards - some polish 2014-03-04 17:01:33 -08:00
people Exclude disabled (disapproved) users from count on People application on homepage 2014-03-10 16:20:49 -07:00
phame Reject Phame domains which include a port number 2014-03-11 15:53:15 -07:00
phid Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
phlux Allow CustomField to provide ApplicationTransaction change details 2014-02-21 11:53:04 -08:00
pholio Let Herald activation depend on which transactions are being applied, and generate transactions 2014-03-05 12:06:59 -08:00
phortune Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
phpast Remove phpast.* Conduit methods 2014-03-12 11:30:22 -07:00
phragment Various linter fixes. 2014-02-26 12:44:58 -08:00
phrequent Various linter fixes. 2014-02-26 12:44:58 -08:00
phriction Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
policy Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
ponder Maniphest Tasks + Project Boards - some polish 2014-03-04 17:01:33 -08:00
project Hovercard - add project images 2014-03-10 17:10:32 -07:00
releeph Clean up various pieces of dead/obsolete Differential code 2014-03-11 13:02:19 -07:00
remarkup/conduit Support processing Remarkup in bulk with remarkup.processbulk Conduit method 2013-11-02 16:30:11 -07:00
repository Clean up various pieces of dead/obsolete Differential code 2014-03-11 13:02:19 -07:00
search Extract textual object list parsing from Differential 2014-03-07 17:44:44 -08:00
settings Don't prefill "add email address" from GET 2014-03-10 16:21:47 -07:00
slowvote Various linter fixes. 2014-02-26 12:44:58 -08:00
subscriptions Various linter fixes. 2014-02-26 12:44:58 -08:00
system Replace some hsprintf() by phutil_tag() 2013-11-11 09:23:23 -08:00
tokens Wrap the feed text rendering stuff with htmlspecialchars_decode 2014-02-03 17:05:30 -08:00
transactions Port Differential mail features forward to transactions 2014-03-11 13:02:06 -07:00
typeahead Various linter fixes. 2014-02-26 12:44:58 -08:00
uiexample PHUITimelineView 2014-02-12 09:02:05 -08:00
xhprof Use JSON, not PHP serialization, for XHProf profiles. 2014-02-24 04:16:52 -08:00