mirror of
https://we.phorge.it/source/phorge.git
synced 2024-12-12 08:36:13 +01:00
No description
7429da91d2
Summary: Make sure that Repository Diffusion Identities "Automatically Detected User " are not created from unverified emails. Closes T15965 Test Plan: Find at least one identity that is assigned to nobody: http://phorge.localhost/diffusion/identity/ (For example, you may easily find an identity of "GitHub <noreply@github.com>") (Double check that its "Assigned To" is unset or make sure it's unset for this test) Be evil: add *that* email in your {nav Profile > Settings > Email addresses}. So, for example add "noreply@github.com", like a rogue. The email can stay unverified. Run this command to immediately cause an effect: ./bin/repository rebuild-identities --all-identities - before this change, you can reproduce that you successfully steal that identity and you become "GitHub" or whoever - after this change, you see that "Automatically Detected User" is unset again - after this change, any other identity manually assigned, is still assigned to that value - after this change, any other identity automatically assigned to verified emails, are still "Automatically Detected User" Reviewers: O1 Blessed Committers, speck, 20after4 Reviewed By: O1 Blessed Committers, speck, 20after4 Subscribers: aklapper, tobiaswiese, Matthew, Cigaryno Maniphest Tasks: T15965 Differential Revision: https://we.phorge.it/D25845 |
||
---|---|---|
bin | ||
conf | ||
externals | ||
resources | ||
scripts | ||
src | ||
support | ||
webroot | ||
.arcconfig | ||
.arclint | ||
.arcunit | ||
.editorconfig | ||
.gitignore | ||
LICENSE | ||
NOTICE | ||
README.md |
Phorge is a collection of web applications which help software companies build better software.
Phorge is a community-maintained fork of Phabricator.
Phorge includes applications for:
- reviewing and auditing source code;
- hosting and browsing repositories;
- tracking bugs;
- managing projects;
- conversing with team members;
- assembling a party to venture forth;
- writing stuff down and reading it later;
- hiding stuff from coworkers; and
- also some other things.
Phorge is developed and maintained by The Phorge Team.
LICENSE
Phorge is released under the Apache 2.0 license except as otherwise noted.