Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OP-2325: deleted TLS/SSL connection from allowed hosts #319

Merged
merged 1 commit into from
Dec 23, 2024

Conversation

lruzicki
Copy link
Contributor

@lruzicki lruzicki commented Dec 20, 2024

Changes:
https://openimis.atlassian.net/browse/OP-2325

Changes:

  • by default the dev.py used the TLS/SSL connection which resulted in unhandled error "no CSRF" when attempting to log into fresh instance

How was it tested?

  • new instance was created
  • allowed hosts were changed to not define the https connection

@lruzicki lruzicki requested a review from delcroip December 20, 2024 16:26
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
3 Security Hotspots

See analysis details on SonarQube Cloud

Copy link
Contributor

@sniedzielski sniedzielski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think It should by ok as a scope of default settings. On server this 'CSRF' will look differently due to having 'https' turn on. @lruzicki
@delcroip Please take a look into that change. As I mentioned above - it shouldn't affect local settings, but I'm a little afraid about 'server' environments like 'demo/release/develop/demo coreMIS' envs.

@delcroip delcroip merged commit 017dbb4 into develop Dec 23, 2024
5 of 7 checks passed
@delcroip delcroip deleted the feature/OP-2325 branch December 23, 2024 16:29
@delcroip
Copy link
Member

@sniedzielski this change affect only dev changes; ideally we should also use protos and ports env VAR but we discussed with @lruzicki to keep it simple for now

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants