aleksis/AlekSIS-Core
9
0
Fork 0
Code Issues 197 Pull requests 63 Projects Releases 14 Packages 1 Wiki Activity Actions

Resolve "Prevent deep linking to media files" #2255

Merged
hansegucker merged 3 commits from 376-prevent-deep-linking-to-media-files-2 into master 2021-05-17 10:03:09 +02:00
Conversation 12 Commits 3 Files changed 4 +25 -53
nik commented 2021-05-16 18:23:38 +02:00
Owner
Copy link

Closes #376

Closes #376
nik commented 2021-05-16 18:29:46 +02:00
Author
Owner
Copy link

added 1 commit

  • 27ea9e89 - Use django-titofisto to serve media files if served locally

Compare with previous version

added 1 commit <ul><li>27ea9e89 - Use django-titofisto to serve media files if served locally</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/610/diffs?diff_id=8537&start_sha=239a10d903f33891d9c27a0a802a595d2ec7da6e)
nik commented 2021-05-16 18:38:01 +02:00
Author
Owner
Copy link

assigned to @hansegucker and unassigned @nik

assigned to @hansegucker and unassigned @nik
nik commented 2021-05-16 18:38:05 +02:00
Author
Owner
Copy link

requested review from @debdolph

requested review from @debdolph
nik commented 2021-05-16 18:39:13 +02:00
Author
Owner
Copy link

@debdolph Please test together with @hansegucker on ticdesk-dev.

Tests:

  • Install branch
  • Open a profile with a user picture
  • Verify that the URL contains token and timestamp
  • Copy the URL
  • Wait 10 minutes
  • Open the same URL in a browser
  • Verify that it returns 404
  • Open the profile page again and verifythat the picture still works and is returned with a new URL
@debdolph Please test together with @hansegucker on ticdesk-dev. Tests: * Install branch * Open a profile with a user picture * Verify that the URL contains token and timestamp * Copy the URL * Wait 10 minutes * Open the same URL in a browser * Verify that it returns 404 * Open the profile page again and verifythat the picture still works and is returned with a new URL
nik commented 2021-05-16 19:09:32 +02:00
Author
Owner
Copy link

added 1 commit

  • 8e9dc6a5 - Fix URL inclusion for titofisto

Compare with previous version

added 1 commit <ul><li>8e9dc6a5 - Fix URL inclusion for titofisto</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/610/diffs?diff_id=8547&start_sha=27ea9e895d56cae7e3066512b75abbe1dc4252b0)
tteichler commented 2021-05-16 19:12:44 +02:00
Owner
Copy link

added 3 commits

  • 8e9dc6a5...0df62126 - 2 commits from branch master
  • 70918511 - Merge branch 'master' into 376-prevent-deep-linking-to-media-files-2

Compare with previous version

added 3 commits <ul><li>8e9dc6a5...0df62126 - 2 commits from branch <code>master</code></li><li>70918511 - Merge branch &#39;master&#39; into 376-prevent-deep-linking-to-media-files-2</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/610/diffs?diff_id=8551&start_sha=8e9dc6a53450c17119b3691b4700a6e4ee033dba)
tteichler commented 2021-05-16 20:23:06 +02:00
Owner
Copy link

works for me

works for me
tteichler commented 2021-05-16 20:23:08 +02:00
Owner
Copy link

resolved all threads

resolved all threads
tteichler commented 2021-05-16 20:29:38 +02:00
Owner
Copy link

approved this merge request

approved this merge request
hansegucker commented 2021-05-17 10:02:54 +02:00
Owner
Copy link

marked this merge request as ready

marked this merge request as **ready**
hansegucker commented 2021-05-17 10:03:14 +02:00
Owner
Copy link

mentioned in commit c6b1d66b45

mentioned in commit c6b1d66b455a308955d769bd10956b8ddb7b4f56
tteichler approved these changes 2026-07-30 18:33:30 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
debdolph
Labels
Clear labels   
Security

   
TeX
Needs LaTeX template

  
auto-update
  
board
done

  
board
ready

  
board
todo

  
check
delete-eslint-rc-js

  
check
update-builddeps-package-json

  
check
update-eslint-rc-js

  
check
update-gitignore

  
check
update-merge-request-template

  
check
update-prettier-ignore

  
check
update-pyproject-toml

  
check
update-renovate-json

  
check
update-tox-ini

  
part
backend
 Backend (view code, models, logic, etc.)

  
part
ci

  
part
docs
 Issue or addition to the documentation

  
part
frontend
 Frontend (templates, etc.)

  
part
i18n
 Translation or internationalisation issue

  
part
non-technical
 Non-technical (policy, maintenance, etc.) issue or discussion

  
part
packaging
 Issue concerning the packaging of AlekSIS and components

  
prio
1
 Priority High

  
prio
2
 Priority Medium

  
prio
3
 Priority Low

  
release-mr-5.x
  
size
large

  
size
medium

  
size
small

  
source
customer
 Requested by a customer or affiliated user

  
source
customer::fsmw

  
source
customer::fss

  
source
customer::teckids

  
source
downstream
 Issue or merge request from other projects using AlekSIS or parts of it

  
type
breaking

  
type
bug
 Bug

  
type
feature
 New feature

  
type
refactoring

  
workflow
blocked
 Issue is blocked by another issue

  
workflow
confirmed
 The bug is reproducible and will be fixed

  
workflow
current-todo

  
workflow
discussing
 Needs to be discussed before implementation

  
workflow
new-app
 Requires new AlekSIS app, which has to be created

  
workflow
wontfix
 The bug is not reproducible or the feature was decided against

No labels
Security
TeX
auto-update
board
done
board
ready
board
todo
check
delete-eslint-rc-js
check
update-builddeps-package-json
check
update-eslint-rc-js
check
update-gitignore
check
update-merge-request-template
check
update-prettier-ignore
check
update-pyproject-toml
check
update-renovate-json
check
update-tox-ini
part
backend
part
ci
part
docs
part
frontend
part
i18n
part
non-technical
part
packaging
prio
1
prio
2
prio
3
release-mr-5.x
size
large
size
medium
size
small
source
customer
source
customer::fsmw
source
customer::fss
source
customer::teckids
source
downstream
type
breaking
type
bug
type
feature
type
refactoring
workflow
blocked
workflow
confirmed
workflow
current-todo
workflow
discussing
workflow
new-app
workflow
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
hansegucker
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aleksis/AlekSIS-Core!2255
No description provided.