Commit graph

8 commits

Author SHA1 Message Date
Antoine Martin ade177de54 README: mention shared secret in configuration 2021-03-30 11:38:58 +02:00
Antoine Martin 7e3c8b8f28 lohr: validate webhook signature
Previously lohr was unusable in a production setting, anyone could forge
a malicious webhook and either:

- mirror a private repo of yours to another remote they own
- wipe a repo of yours by forcing mirroring from an empty mirror

This is no longer the case!
2021-03-30 11:33:42 +02:00
Antoine Martin 230f3f6176 README: write setup documentation 2021-03-30 00:57:58 +02:00
Antoine Martin 315dc55ca7 README: add license notice 2021-03-29 23:17:17 +02:00
Antoine Martin 9b8668138a README: add contributing guidelines 2021-03-29 23:11:13 +02:00
Antoine Martin 0db3125601 README: adjust indentation 2021-03-29 23:10:52 +02:00
Antoine Martin 3390af3818 README: add origin story 2021-03-29 17:42:03 +02:00
Antoine Martin fe83858df7 add README 2021-03-29 17:38:50 +02:00