ambroisie/lohr
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
35 commits 2 branches 3 tags 324 KiB
Commit graph

2 commits

Author SHA1 Message Date
Antoine Martin fea9d61d2b signature: fix unused trait warning 2021-03-30 11:41:16 +02:00
Antoine Martin 7e3c8b8f28 lohr: validate webhook signature 
Previously lohr was unusable in a production setting, anyone could forge
a malicious webhook and either:

- mirror a private repo of yours to another remote they own
- wipe a repo of yours by forcing mirroring from an empty mirror

This is no longer the case!
 2021-03-30 11:33:42 +02:00