188ea98441
Instead of disabling repo names with periods in them, we simply disallow calls to the API when they are GET requests, whose path ends in a dot, and that do not have a referrer from the frontend. |
||
|---|---|---|
| .. | ||
| avatar | ||
| build | ||
| datafile | ||
| dockerfile | ||
| page | ||
| route-builder | ||
| view-array | ||
| angular-helper.js | ||
| angular-poll-channel.js | ||
| api-service.js | ||
| container-service.js | ||
| cookie-service.js | ||
| document-visibility-service.js | ||
| documentation-service.js | ||
| external-login-service.js | ||
| external-notification-data.js | ||
| features-config.js | ||
| image-loader-service.js | ||
| image-metadata-service.js | ||
| key-service.js | ||
| meta-service.js | ||
| notification-service.js | ||
| oauth-service.js | ||
| ping-service.js | ||
| plan-service.js | ||
| roles-service.js | ||
| status-service.js | ||
| string-builder-service.js | ||
| table-service.js | ||
| trigger-service.js | ||
| ui-service.js | ||
| user-service.js | ||
| util-service.js | ||
| vulnerability-service.js | ||