Skip to content

Commit

Permalink
Xss vuln (#299)
Browse files Browse the repository at this point in the history
* [Security] Remove access to development site

The development site wasn't used and had an XSS vulnerability.

* Pin to previous version of Debian. Bookworm has new installation procedure for docker, this is a workaround until someone has cycles to submit a PR that trues up the Dockerfile to the new debian:bookworm procedure

---------

Co-authored-by: Mark Mandel <markmandel@google.com>
  • Loading branch information
joeholley and markmandel committed Jul 25, 2023
1 parent afa7432 commit 356700b
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 2 deletions.
2 changes: 1 addition & 1 deletion Dockerfile.ci
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.

FROM debian
FROM debian:bullseye

RUN apt-get update
RUN apt-get install -y -qq git make python3 virtualenv curl sudo unzip apt-transport-https ca-certificates openssl curl software-properties-common gnupg2
Expand Down
1 change: 0 additions & 1 deletion site/layouts/partials/navbar.html
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,6 @@
Release
</a>
<div class="dropdown-menu" aria-labelledby="navbarDropdownMenuLink">
<a class="dropdown-item" href="https://development.open-match.dev/site/">Development</a>
<a class="dropdown-item" href="https://open-match.dev/site/">{{ .Site.Params.release_version }}</a>
</div>
</li>
Expand Down

0 comments on commit 356700b

Please sign in to comment.