Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #21367 Disallow http:// URLs when adding a GitLab repository
    Actions
    Infos
    #21367
    Thomas Gerbet (tgerbet)
    2021-05-19 11:15
    2021-05-18 16:11
    22964
    Details
    Disallow http:// URLs when adding a GitLab repository

    Tuleap instances are expected to be served under HTTPS which make not possible to do a request to an HTTP endpoint because browsers blocks active mixed content (or to be more specific in our situation with the CSP Tuleap uses, the browser will attempt to upgrade the URL to https://).

    In any case it's not a good idea to try to reach the GitLab server over HTTP since the request will contain credential information.

    SCM/GitLab
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2021-05-19
    Attachments
    Empty
    References
    Referencing request #21367

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/52/22752/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 8499ab6ae0
    User avatar Benjamin Bouillot (ben.bouillot) , 2021-05-19 11:11
    request #21367: Disallow http:// URLs when adding a GitLab repository 08d7a4f45c
    User avatar Thomas Gerbet (tgerbet) , 2021-05-18 16:33
    Referenced by request #21367

    Artifact Tracker v5

    rel #20930 12.9

    Other

    gerrit #22752
    Display settings

    Follow-ups