Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Outer dev #292

Merged
merged 45 commits into from
Sep 17, 2023
Merged

Outer dev #292

merged 45 commits into from
Sep 17, 2023

Conversation

o0101
Copy link
Collaborator

@o0101 o0101 commented Sep 14, 2023

Completed integration of new doc viewier (chai) with the rest of the system.

Basic integration complete. Consisting of:

  • API key auth
  • Sending documents to the server and viewing them
  • Exploring archives

Some bugs exist and are tracked at: https://github.com/dosyago/chai

- pick and pass a port along to the docviewer script
- automatically setup the secrets/key.js file on install
- modify the get_download_view_url.sh script to utilize the domain name and port to make requests to
…default port

Need to hit the other items in the todo list
- pick and pass port
- get view url script utilizes correct name and port
…er-dev

DONE:

- pick and pass a port along to the docviewer script
- automatically setup the secrets/key.js file on install
- modify the get_download_view_url.sh script to utilize the domain name and port to make requests to
- fix heredoc computation of domain name in sourced config script
- set up secrets/key.js or make it an env variable (better idea) for the API_KEY for the doc viewer service
- probably create that api key to exist in the config script
Copy link

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodeQL found more than 10 potential problems in the proposed changes. Check the Files changed tab for more details.

@o0101
Copy link
Collaborator Author

o0101 commented Sep 14, 2023

need to fix these codeQL critical alerts on chai before we merge this in

Copy link

@github-advanced-security github-advanced-security bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodeQL found more than 10 potential problems in the proposed changes. Check the Files changed tab for more details.

src/services/pool/chai/src/index.js Dismissed Show dismissed Hide dismissed
src/services/pool/chai/src/index.js Fixed Show fixed Hide fixed
src/services/pool/chai/src/index.js Fixed Show fixed Hide fixed
src/services/pool/chai/src/index.js Fixed Show fixed Hide fixed
src/services/pool/chai/src/rebuild_hashes.js Dismissed Show dismissed Hide dismissed
res.redirect(viewUrl);
} else if ( sendURL ) {
res.type('text/plain');
res.end(viewUrl);

Check warning

Code scanning / CodeQL

Reflected cross-site scripting Medium

Cross-site scripting vulnerability due to a
user-provided value
.
@o0101 o0101 merged commit b02990b into boss Sep 17, 2023
3 checks passed
@o0101 o0101 deleted the outer-dev branch September 17, 2023 11:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant