Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Block public access to some expensive parameters #1084

Merged
merged 7 commits into from
Feb 7, 2023
Merged

Block public access to some expensive parameters #1084

merged 7 commits into from
Feb 7, 2023

Commits on Feb 3, 2023

  1. Block public access to some /versions parameters 

    Some parameters for the various `/versions` collections cause expensive queries, so they are disallowed for public, non-logged-in usage.

Solves part of #1070.
    @Mr0grog
    Mr0grog committed Feb 3, 2023
    Configuration menu
    Copy the full SHA
    9487e7d View commit details
    Browse the repository at this point in the history

Commits on Feb 4, 2023

  1. OBEY RUBOCOP

    @Mr0grog
    Mr0grog committed Feb 4, 2023
    Configuration menu
    Copy the full SHA
    a8b9821 View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2023

  1. Block expensive params for pages controller

    @Mr0grog
    Mr0grog committed Feb 6, 2023
    Configuration menu
    Copy the full SHA
    d9a61de View commit details
    Browse the repository at this point in the history

  2. Allow per-action blocking

    @Mr0grog
    Mr0grog committed Feb 6, 2023
    Configuration menu
    Copy the full SHA
    0085f13 View commit details
    Browse the repository at this point in the history

  3. Fix minor bugs and style issues

    @Mr0grog
    Mr0grog committed Feb 6, 2023
    Configuration menu
    Copy the full SHA
    0c054d9 View commit details
    Browse the repository at this point in the history

  4. Block bad params on other controllers

    @Mr0grog
    Mr0grog committed Feb 6, 2023
    Configuration menu
    Copy the full SHA
    1cde2dc View commit details
    Browse the repository at this point in the history

  5. Explicitly configure public viewing with new test

    @Mr0grog
    Mr0grog committed Feb 6, 2023
    Configuration menu
    Copy the full SHA
    3719cf0 View commit details
    Browse the repository at this point in the history