overleaf-cep

mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-12 13:13:45 +01:00

Files

T

Tobias Hallmen a683019198 Git-bridge: nginx: only expose git-bridge project endpoints under /git/ (#260 )

The /git/ location proxied every path to git-bridge, which made its
internal routes reachable from the internet: /status, /health_check,
/metrics, /diags, /api/<project>/<key>/postback and the unauthenticated
DELETE /api/projects/<project id> used by web on project expiry.

Forward only /git/<24 hex project id>[.git]/... (the git smart-HTTP
endpoints, which git-bridge protects with Oauth2Filter) and return 404
for everything else under /git/. Web talks to git-bridge directly
(GIT_BRIDGE_HOST:GIT_BRIDGE_PORT), not through nginx, so it is not
affected.

2026-11-04 14:10:09 +01:00

bin

[server-ce] run node scripts as www-data user (#27504 )

2025-07-31 08:05:15 +00:00

config

Registration page: the initial commit

2026-09-22 02:41:43 +02:00

cron

[server-ce] run node scripts as www-data user (#27504 )

2025-07-31 08:05:15 +00:00

hotfix

Hotfix 5.5.6-ext-3.3