Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the ability to store env (and kids) inside couchapp.json #200

Closed
BigBlueHat opened this issue Nov 17, 2015 · 7 comments
Closed

Remove the ability to store env (and kids) inside couchapp.json #200

BigBlueHat opened this issue Nov 17, 2015 · 7 comments

Comments

@BigBlueHat
Copy link
Member

Until this PR #195, I had no idea one could put env contents in couchapp.json. This seems to invite risk of publishing more than one wants--putting public facing content (name, description) content next to private, unencrypted content (env.default.db, etc.).

I'd propose we remove couchapp.json from config.py line 65.

@BigBlueHat BigBlueHat added this to the 1.1.0 milestone Nov 17, 2015
@iblislin
Copy link
Collaborator

i think it's reasonable for carrying something like hooks and vendor handler via couchapp.json.

Maybe we can consider some trade-off: just prevent env loaded from couchapp.json only.

@iblislin
Copy link
Collaborator

@BigBlueHat I will implement the trade-off version if #176 completes.

@iblislin iblislin self-assigned this Dec 25, 2015
iblislin added a commit that referenced this issue Jan 10, 2016
We will ignore the whole `env` field in `couchapp.json`,
and show some warnings.
@iblislin
Copy link
Collaborator

@BigBlueHat please try out branch issue-200 :)

@BigBlueHat
Copy link
Member Author

Perfect! Great thinking on the warning message--and having the details of where the information should go. Super fab! 💃

@iblislin
Copy link
Collaborator

I will document this and send PR in few days later. :)

@BigBlueHat
Copy link
Member Author

❤️

iblislin added a commit that referenced this issue Jan 13, 2016
We will ignore the whole `env` field in `couchapp.json`,
and show some warnings.
iblislin added a commit that referenced this issue Jan 19, 2016
[#200] Prevent user from placing `env` in `couchapp.json`
@iblislin
Copy link
Collaborator

Merged via f2955e9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants