Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2025-11-14 17:26:22 +01:00
Code Issues Packages Projects Releases Activity
4,136 Commits 32 Branches 207 Tags
2d103b7f958939cc912f9bcc55dae47cda7c1492
Commit Graph

437 Commits

Author SHA1 Message Date
Matt Harbison
2d103b7f95 optionally print tracebacks when the Mercurial hook swallows an exception 
If `ui.traceback=True` is set on the server, this prints the stacktrace for the
exception on the client side.  Otherwise, nothing happens.  I tried allowing the
exception to propagate back to Mercurial, but then the client sees this message
with 4.4.2 and 4.6.1:

    abort: remote error:
    Mercurial/Python process ends with return code 1

Something odd changed when upgrading from CentOS 7.4 to 7.5 around forwarding
requests from the loopback address that I don't fully understand.  First, we
were getting a ValueError from inside `opener.open()` saying that 'localhost'
didn't match the host listed in the SSL certificate.  That wasn't visible until
adding this.

Then what happened is a connection refused out of the same function, so the
traceback is added to the other handler too.  Running the equivalent command on
the command line from the 'vcs' host stopped working in 7.5:

  $ curl https://vcs.domain.com/hook/hg/?ping=true
  curl: (7) Failed connect to vcs.domain.com:443; Connection refused

But it works when run on another machine targeting that same 'vcs' host.  Adding
another firewall rule allows everything to work from the 'vcs' host again:

  $ iptables -t nat -I OUTPUT -p tcp -o lo --dport 443 -j REDIRECT --to-ports 8443
 2018-06-22 16:33:52 -04:00
Matt Harbison
a051eb159c #989 load global configuration in hgweb on Mercurial 4.1 and later 2018-06-22 16:06:35 -04:00
Sebastian Sdorra
e826b833cc switch from jersey 1.x to resteasy 2017-06-27 20:16:05 +02:00
Sebastian Sdorra
3f27dd8cca [maven-release-plugin] prepare for next development iteration 2018-05-04 11:14:45 +02:00
Sebastian Sdorra
a0b3b154c8 [maven-release-plugin] prepare release 1.60 2018-05-04 11:14:45 +02:00
Sebastian Sdorra
7d6c65799e #972 use javahg version which is compatible with java 7 2018-04-12 11:57:00 +02:00
Sebastian Sdorra
247ee63a95 [maven-release-plugin] prepare for next development iteration 2018-04-11 10:09:12 +02:00
Sebastian Sdorra
92a492f68b [maven-release-plugin] prepare release 1.59 2018-04-11 10:09:11 +02:00
Gábor Stefanik
e230c0f4cd make {extras} work on old versions of Hg 2018-04-06 20:30:15 +00:00
Sebastian Sdorra
7ed4dbcf00 fix hgweb execution for mercurial versions prior 4.1 2018-04-06 14:01:00 +02:00
Sebastian Sdorra
dd313036ff [maven-release-plugin] prepare for next development iteration 2018-04-06 08:28:51 +02:00
Sebastian Sdorra
482589fc67 [maven-release-plugin] prepare release 1.58 2018-04-06 08:28:50 +02:00
Sebastian Sdorra
ff2afceb55 update javahg to version 0.13 2018-04-05 19:48:04 +02:00
Sebastian Sdorra
3d401b93ea #970 added help text for enable httppostargs 2018-04-03 11:56:51 +02:00
Sebastian Sdorra
acebd0f25e #970 wrap requests only if http postargs is enabled 2018-04-03 11:14:05 +02:00
Sebastian Sdorra
8047d36028 #970 use iso-8859-1 for http post args instead of us-ascii 2018-04-03 11:00:16 +02:00
Sebastian Sdorra
b43e406b76 #970 initial support of mercurials httppostargs protocol 2018-03-30 11:20:22 +02:00
Sebastian Sdorra
a34acd8ed4 #970 added option to enable the experimental httppostargs protocol of mercurial 2018-03-29 22:14:28 +02:00
Sebastian Sdorra
8aaa67cd6a #970 inspect mercurial commands in order to detect write requests 
The HgPermissionFilter will now inspect the used mercurial command, of all requests which are using a read method like GET, HEAD, OPTIONS or TRACE and tread every one as write request, expect:
- no command was specified with the request (this is required for the hgweb ui)
- the command in the query string was found in the list of read commands
- if query string contains the batch command, then all commands specified in X-HgArg headers must be in the list of read commands
This change is required, in order to fix CVE-2018-1000132 for SCM-Manager.
 2018-03-29 20:26:56 +02:00
Sebastian Sdorra
e7dd54c133 #970 added ngrep dumps for mercurial wire protocol and more realistic tests for isWriteRequest 2018-03-29 10:21:34 +02:00
Sebastian Sdorra
7d94b03a04 #959 added option to disable ssl validation for scm mercurial hook 2018-02-23 08:44:22 +01:00
Sebastian Sdorra
d21a28fa0b [maven-release-plugin] prepare for next development iteration 2018-02-09 08:14:35 +01:00
Sebastian Sdorra
b64d41f3c9 [maven-release-plugin] prepare release 1.57 2018-02-09 08:14:34 +01:00
Sebastian Sdorra
0ff9b255c3 [maven-release-plugin] prepare for next development iteration 2018-01-15 14:51:11 +01:00
Sebastian Sdorra
f66221e566 [maven-release-plugin] prepare release 1.56 2018-01-15 14:51:10 +01:00
Sebastian Sdorra
712c14f910 [maven-release-plugin] prepare for next development iteration 2017-11-02 09:21:42 +01:00
Sebastian Sdorra
fd047c1170 [maven-release-plugin] prepare release 1.55 2017-11-02 09:21:42 +01:00
Gábor Stefanik
77eea15417 oops... don't interpret "close=junk" as "close=1" 2017-09-18 12:34:50 +00:00
Gábor Stefanik
14ee6ef0d6 prevent binary data in {extras} from interfering with UTF-8 decoding 2017-09-18 12:30:20 +00:00
Sebastian Sdorra
07a1c8b151 [maven-release-plugin] prepare for next development iteration 2017-06-06 11:39:35 +02:00
Sebastian Sdorra
fd02f4c068 [maven-release-plugin] prepare release 1.54 2017-06-06 11:39:34 +02:00
Sebastian Sdorra
b51fba2282 fix repository browsing with mercurial 4.x 2017-06-06 08:14:04 +02:00
Sebastian Sdorra
5cae7ab35a [maven-release-plugin] prepare for next development iteration 2017-05-17 08:36:55 +02:00
Sebastian Sdorra
95bc7607c4 [maven-release-plugin] prepare release 1.53 2017-05-17 08:36:54 +02:00
Sebastian Sdorra
1d1e239d64 [maven-release-plugin] prepare for next development iteration 2017-05-10 09:46:54 +02:00
Sebastian Sdorra
68903ea5af [maven-release-plugin] prepare release 1.52 2017-05-10 09:46:54 +02:00
Sebastian Sdorra
1b16613840 [maven-release-plugin] prepare for next development iteration 2017-02-09 13:33:00 +01:00
Sebastian Sdorra
da3a8b7cd3 [maven-release-plugin] prepare release 1.51 2017-02-09 13:32:59 +01:00
Sebastian Sdorra
7e6f4e1a7f fix some warning and removed some unused imports 2017-01-14 12:05:53 +01:00
Sebastian Sdorra
c149b180a1 use newer repository client api 2017-01-14 11:48:42 +01:00
Sebastian Sdorra
526d79b96d [maven-release-plugin] prepare for next development iteration 2016-11-24 14:11:36 +01:00
Sebastian Sdorra
0bbea7a47a [maven-release-plugin] prepare release 1.50 2016-11-24 14:11:36 +01:00
Sebastian Sdorra
c6f66c1a32 merge with branch issue-859 2016-10-03 10:53:26 +02:00
Sebastian Sdorra
264a1af634 treat HEAD, OPTIONS and TRACE as mercurial read requests not only GET, see issue #859 2016-09-30 22:23:14 +02:00
Sebastian Sdorra
c988b01ab7 remove test hook 2016-09-29 09:23:13 +02:00
Sebastian Sdorra
617ed81b53 implemented HookTagProvider api for mercurial 2016-09-29 09:11:53 +02:00
Sebastian Sdorra
c4111ec73f [maven-release-plugin] prepare for next development iteration 2016-07-26 12:43:15 +02:00
Sebastian Sdorra
d2743ce5b0 [maven-release-plugin] prepare release 1.49 2016-07-26 12:43:15 +02:00
Sebastian Sdorra
1cf399ab2d implement mercurial repository test client 2016-07-26 00:16:14 +02:00
Sebastian Sdorra
49b79f740f merge repository heads 2016-06-29 20:40:37 +02:00