Repository navigation
fix(registry): support HTTPS GitLab bundle downloads - #1768
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Hi! 👋 Join our CodeGraphContext Discord channel to collaborate: https://discord.gg/dR4QY32uYQ |
🔍 PR Code Graph Analysisfix(registry): support HTTPS GitLab bundle downloads (#1768) 📊 Interactive VisualizationView the blast radius graph: PR Reviewer Dashboard 📦 ArtifactsThe graph JSON has been uploaded as a build artifact: Generated by CodeGraphContext using FalkorDB Lite |
Shashankss1205
left a comment
Shashankss1205
left a comment
There was a problem hiding this comment.
Reviewed HTTPS and hostname boundary checks; new allowed hosts do not accept HTTP, lookalike domains, another userinfo host or loopback. Combined regression suite: 77 passed; Ruff passes. The strict parity job reproduced #1730's known 51 missing Variable endpoints and has been retried once with diagnostics linked there. No parity tolerance was added.
github-project-automation
Bot
moved this from Backlog tasks
to Done
in CGC Progress Board
This branch was successfully deployed
1 participant
Allows gitlab.com and raw.gitlab.com through the existing HTTPS download-host policy. Existing hostname-boundary and scheme checks remain in force.
Validation: allowed GitLab hosts plus HTTP, lookalike host, userinfo and loopback rejection regressions; helper/security regression suite: 55 passed. Ruff passes.
Closes #1234.