[Buildbot] #3374: Whitelist config keys exposed in the config endpoint

Buildbot trac trac at buildbot.net
Wed Oct 21 15:42:38 UTC 2015


#3374: Whitelist config keys exposed in the config endpoint
---------------------+-------------------
Reporter:  dustin    |      Owner:
    Type:  defect    |     Status:  new
Priority:  critical  |  Milestone:  0.9.0
 Version:  0.9.0b4   |   Keywords:
---------------------+-------------------
 `master/buildbot/www/config.py` currently exposes all of `c['www']` with a
 few exceptions.  It'd be nice, instead, to only expose what must be
 exposed, so that any secrets added to other keys don't end up on the
 Internet.

--
Ticket URL: <http://trac.buildbot.net/ticket/3374>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation


More information about the bugs mailing list