Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Corrections de sécurité diverses #1457

Merged
merged 4 commits into from
Dec 1, 2023
Merged

Corrections de sécurité diverses #1457

merged 4 commits into from
Dec 1, 2023

Conversation

SebouChu
Copy link
Member

  • On ne peut plus accéder au /admin depuis un extranet
    • Ce qui évite des scripts malveillants exécutés dans le contexte d'un extranet de faire des requêtes dans ce namespace
  • Dans les prévisualisations d'objets comportant des blocs, le contenu des blocs embed est sanitized avec une notice qui explique le filtrage du contenu
  • La prévisualisation des fichiers statiques est maintenant rendue en texte brut pour éviter des exécutions de script

@pabois pabois merged commit d14087d into main Dec 1, 2023
3 checks passed
@pabois pabois deleted the fix-security-v3 branch December 1, 2023 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@pabois pabois pabois approved these changes

@arnaudlevy arnaudlevy Awaiting requested review from arnaudlevy arnaudlevy is a code owner

@alexisben alexisben Awaiting requested review from alexisben alexisben is a code owner

@Olivia206 Olivia206 Awaiting requested review from Olivia206 Olivia206 is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@SebouChu @pabois