Files
phabricator/src/applications
epriestley e5b402d13f Lock all reply-handler options in the upstream, plus cookie prefix
Summary:
Ref T7185. These settings shouldn't be unlocked anywhere. Specifically:

  - `reply-handler`: These are on the way out.
  - `reply-handler-domain`: Also hopefully on the way out; locked because a compromised administrator account can redirect replies.
  - `phabricator.cookie-prefix`: Not dangerous per se, but an admin could have a hard time fixing this if they changed it by accident since their session would become invalid immediately.

Test Plan: Browsed Config.

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T7185

Differential Revision: https://secure.phabricator.com/D11764
2015-02-13 11:00:09 -08:00
..
2015-02-10 18:57:45 +11:00
2015-02-10 18:57:45 +11:00
2015-02-09 13:10:56 -08:00
2015-02-09 13:10:56 -08:00
2015-02-01 20:14:56 -08:00
2015-02-09 13:10:56 -08:00
2014-09-10 06:55:05 +10:00
2015-02-09 13:10:56 -08:00
2015-02-09 13:10:56 -08:00
2015-02-03 06:59:16 +11:00
2015-02-01 20:14:56 -08:00
2015-02-09 13:10:56 -08:00
2015-02-09 13:10:56 -08:00
2014-07-25 10:54:15 +10:00