Hi Bruno,
Agreed , this is mostly a security concern, something which I have the
least expertise. All I can say its perhaps possible to implement using
post and an identifier but beyond that Luke Macken or anyone who is a
security expert will be able to help you better with this.
On 07/25/2016 11:46 AM, Bruno Wolff III wrote:
On Mon, Jul 25, 2016 at 10:30:57 -0400,
rkolathu <rkolathu@xxxxxxxxxx> wrote:
Hi bruno
Thanks for the great suggestion, having a button to do push requests
from the testing branch to the stable one seems like a great idea and
implementable as well. However I could not understand the part about
not having to enable to javascript. If you could explain me more
about this it will be great. Meanwhile opening an RFE in the github
page https://github.com/fedora-infra/bodhi/issues would be great as well
Turning on javascript significantly increases the risk on being
compromised through a browser. While I implicitly trust Fedora since I
am running Fedora code on my laptops, server and work desktop, having
to turn it on still poses some increase in that bodhi specifically is
compromised or that I forget to turn it off when looking at some place
else.
_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
