New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Added check for hide_admin_url config item #175
Conversation
Added check for display_admin_url config item which if not set to 1 will prevent the server from revealing the admin URL when the user visits the incorrect domain (more useful in combination with the musthost config item)
The default value for this is 1 (to preserve backward compatibility).
Looks like this new option makes the new behavior the default. Can you invert this so that Webmin behaves as it does now unless some new option is set (like hide_admin_url) ? |
I've inverted the comparison of display_admin_url so that it must be set to 0 in order to disable it
I've updated the code now, do I need to resubmit the pull request? |
Looks better, but you should also remove the default setting from Perturbatio@4b59012 |
That default setting should actually allow normal activity, I just thought it'd be more intuitive to a user when editing the config if the value was already there |
Wait, I think you got mixed up by my previous suggestion. The new config option should be called "hide_admin_url", and should have a default of zero - which means it could be left out of the default config block entirely. |
changed display_admin_url to hide_admin_url and changed comparator to test if this value is not set to 1
ok, updated again :) On 24 October 2014 15:26, Jamie Cameron notifications@github.com wrote:
|
Added check for hide_admin_url config item
Thanks! |
Added check for display_admin_url config item which if not
set to 1 will prevent the server from revealing the admin URL
when the user visits the incorrect domain
(more useful in combination with the musthost config item)
This allows the user to lock the admin to a specific domain and
prevent the server revealing that domain to the public