Actions
Bug #6726
closedUpdate All displays url instead of package name on http fail
Description
Update All does not function due to Package Builder not passing the token user to access and condition checks. That functionality is now fixed in package builder. However, in discovering this issue it was discovered the install from web exposes the token url to the user in the event the http request fails. That token url should be suppressed from display to prevent accidental sharing of tokens.
Updated by krileon over 7 years ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Fixed in MR !1280 and Commit 5d8c01f6
Updated by krileon over 7 years ago
- Subject changed from Update All does not function to Update All exposes urls on http fail
Updated by krileon over 7 years ago
- Subject changed from Update All exposes urls on http fail to Update All displays url instead of package name on http fail
Updated by krileon almost 7 years ago
- Target version changed from CB 2.2 to CB 2.1.4
Actions