Skip to content

Conversation

@amulet1
Copy link
Contributor

@amulet1 amulet1 commented Jun 25, 2025

Could we drop the unrestricted access directives and instead rely on the web server global configuration?

At best it is not needed, and at worst it is a security concern as it overrides a potentially more restrictive web server configuration.

The "allow all" is at best not needed, and at worst it overrides a potentially more restrictive web server configuration.
@amulet1
Copy link
Contributor Author

amulet1 commented Jun 26, 2025

@ralflang, please review.

@ralflang
Copy link
Member

This needs to go along with an announcement in the ML if merged.

In the longer run we want to have this file no longer statically merged but generated on-install.

@ralflang ralflang self-assigned this Jun 26, 2025
@ralflang ralflang self-requested a review June 26, 2025 05:39
@amulet1
Copy link
Contributor Author

amulet1 commented Aug 6, 2025

@TDannhauer, please could you review/merge?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants