openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update puppet-etherpad_lite from branch 'master'
  - Refuse external connections to the API
    
    The Etherpad API is only useful for authenticated access via the
    secret API key, which resides on the server's filesystem. It can
    already be accessed from localhost over the nodejs listener socket,
    so doesn't need to be reachable through the external Apache proxy.
    Refuse connections to it through Apache in an effort to reduce
    exposure to future unauthenticated or authentication bypass bugs in
    the API implementation.
    
    Change-Id: Ia5cf2f15c21eb397eeb878c81cd3c7a29f5aecbd
This commit is contained in:
Jeremy Stanley 2018-04-11 16:45:15 +00:00 committed by Gerrit Code Review
parent 11259b2167
commit cf3bafb861
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
puppet-etherpad_lite

@ -1 +1 @@
Subproject commit e44d991eae50f33f85f090b61e533a1270751e33
Subproject commit 5b9395aea1a910cb12ab04f9a266da1e7136256e