[Buildbot] #3636: Not allowing FQDN for URL

Buildbot trac trac at buildbot.net
Sat Oct 29 07:14:42 UTC 2016


#3636: Not allowing FQDN for URL
------------------------+------------------------
Reporter:  kayhayen     |       Owner:
    Type:  enhancement  |      Status:  closed
Priority:  minor        |   Milestone:  undecided
 Version:  0.9.0        |  Resolution:  wontfix
Keywords:               |
------------------------+------------------------

Comment (by tardyp):

 buildbotURL is used to configure CORS access. This is very important for
 security to mitigate XSS attacks.
 It cannot be guessed because it depends on how a reverse proxy is
 configured (reverse proxy is recommended in order to get gzip compression
 and https)

 As lots of new people are doing the mistake of misconfiguring it, the UI
 will complain when it detects it is misconfigured.

 If you are interrested in making the message more explicit in the case of
 x.y vs x, we will kindly accept the patch.

 regards,

--
Ticket URL: <http://trac.buildbot.net/ticket/3636#comment:4>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation


More information about the bugs mailing list