Mobrovac has uploaded a new change for review. https://gerrit.wikimedia.org/r/232717
Change subject: Citoid: Add security config parameters ...................................................................... Citoid: Add security config parameters I695a0ab7e4aab3746e7b60d7699672c79ea26d11 introduces a security fix for Citoid disallowing it to scrape private IPs. While the provided default values work as we'd expect them to in production, let's explicitly list them in the config template as well. Bug: T98533 Change-Id: I6e9a5986e17556a01c0890d26206cbe4bc8fec50 --- M modules/citoid/templates/config.yaml.erb 1 file changed, 4 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/17/232717/1 diff --git a/modules/citoid/templates/config.yaml.erb b/modules/citoid/templates/config.yaml.erb index 5eccc47..a3a037b 100644 --- a/modules/citoid/templates/config.yaml.erb +++ b/modules/citoid/templates/config.yaml.erb @@ -8,3 +8,7 @@ zoteroPort: <%= @zotero_port %> # whether the proxy should be used to contact zotero zoteroUseProxy: false +# whether Citoid is allowed to scrape private IPs +allowPrivateAddresses: false +# maximum number of redirects allowed +maxRedirects: 5 -- To view, visit https://gerrit.wikimedia.org/r/232717 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I6e9a5986e17556a01c0890d26206cbe4bc8fec50 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Mobrovac <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
