This repository has been archived on 2020-03-24. You can view files and clone it, but cannot push or open issues or pull requests.

Joseph Schorr 188ea98441 Add new decorator to prevent reflected text attacks ... Instead of disabling repo names with periods in them, we simply disallow calls to the API when they are GET requests, whose path ends in a dot, and that do not have a referrer from the frontend.		2018-02-20 11:33:45 -05:00
..
api	Add new decorator to prevent reflected text attacks	2018-02-20 11:33:45 -05:00
appr	Fix 500 exception when sending a non-string release name to appr	2018-01-12 17:14:05 -05:00
keyserver	endpoints.keyserver: new fs org for data interface	2017-07-17 14:25:18 -04:00
oauth	Don't add a "password required" notification for non-database auth via OIDC	2017-11-13 16:17:36 -05:00
test	Add new decorator to prevent reflected text attacks	2018-02-20 11:33:45 -05:00
v1	Refactor auth code to be cleaner and more extensible	2018-02-14 15:35:27 -05:00
v2	Refactor auth code to be cleaner and more extensible	2018-02-14 15:35:27 -05:00
verbs	Add instance health checks for all gunicorn workers	2018-01-16 11:29:40 -05:00
__init__.py	Refactor the code into modules, it was getting unweildy.	2013-09-25 12:45:12 -04:00
bitbuckettrigger.py	Move route_show_if into decorators	2017-07-20 11:07:31 -04:00
building.py	Move notification helper code into the root module	2017-07-25 17:00:07 -04:00
common.py	whitelisted moment.js locales to reduce bundle size	2017-08-02 15:46:14 -04:00
common_models_interface.py	Change endpoints/common to use a data interface	2017-07-20 16:01:39 -04:00
common_models_pre_oci.py	Change endpoints/common to use a data interface	2017-07-20 16:01:39 -04:00
csrf.py	Refactor auth code to be cleaner and more extensible	2018-02-14 15:35:27 -05:00
decorated.py	*: fix legacy imports	2016-09-28 20:17:14 -04:00
decorators.py	Add new decorator to prevent reflected text attacks	2018-02-20 11:33:45 -05:00
exception.py	Make downstream issues show their error in the UI	2017-07-31 17:07:22 -04:00
githubtrigger.py	Move parse_repository_name into decorators	2017-07-20 16:01:38 -04:00
gitlabtrigger.py	Move route_show_if into decorators	2017-07-20 11:07:31 -04:00
realtime.py	Move auth decorators into a decorators module	2017-03-23 15:42:45 -04:00
secscan.py	Move route_show_if into decorators	2017-07-20 11:07:31 -04:00
web.py	Add instance health checks for all gunicorn workers	2018-01-16 11:29:40 -05:00
webhooks.py	Only send internal cancelation emails if the user canceled themselves	2017-06-16 14:27:55 -04:00
wellknown.py	Add API endpoint for retrieving security status by *manifest*, rather than Docker V1 image ID	2017-02-02 17:51:18 -05:00