> I'm explicitly passing it's hash as the head. [...] PR branch should still be
> present and accessible.
I suspect that there must be more to pull_request_target to prevent untrusted
code from accidentally being executed with elevated privileges...
--
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/5267#issuecomment-2430104880
You are receiving this because you are subscribed to this thread.
Message ID:
<openstreetmap/openstreetmap-website/issues/5267/2430104...@github.com>
_______________________________________________
rails-dev mailing list
rails-dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/rails-dev
