Branch: refs/heads/master Home: https://github.com/openSUSE/open-build-service Commit: 416c21eda98d9248beb757dbe05f9eab511b2e5a https://github.com/openSUSE/open-build-service/commit/416c21eda98d9248beb757... Author: Eduardo Navarro <enavarro@suse.com> Date: 2024-09-27 (Fri, 27 Sep 2024) Changed paths: M src/api/app/controllers/application_controller.rb Log Message: ----------- First, perform user authentication. Then, XML validation Validating XML input, and in general running any other code, should not be done before a user is authenticated. Commit: f31970f92a00fe430a3f8840ac0273dc05625263 https://github.com/openSUSE/open-build-service/commit/f31970f92a00fe430a3f88... Author: Eduardo Navarro <enavarro@suse.com> Date: 2024-09-27 (Fri, 27 Sep 2024) Changed paths: M src/api/test/functional/request_controller_test.rb Log Message: ----------- Adapt tests. Now XML validation is performed... ... before user authentication Commit: 2f46b8bc2c7f72fbe9e4eaa400e5351bb88c0ddb https://github.com/openSUSE/open-build-service/commit/2f46b8bc2c7f72fbe9e4ea... Author: Lukas Krause <lkrause@suse.de> Date: 2024-09-27 (Fri, 27 Sep 2024) Changed paths: M src/api/app/controllers/application_controller.rb M src/api/test/functional/request_controller_test.rb Log Message: ----------- Merge pull request #16889 from eduardoj/fix/first_authenticate_then_validate_xml First, perform user authentication. Then, XML validation Compare: https://github.com/openSUSE/open-build-service/compare/36f264e9a980...2f46b8... To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/open-build-service/settings/notifications