Mercurial > p > roundup > code
view website/www/Makefile @ 5924:b40059d7036f
issue2550925 strip HTTP_PROXY environment variable
if deployed as CGI and client sends an http PROXY
header, the tainted HTTP_PROXY environment variable is created. It
can affect calls using requests package or curl. A roundup admin
would have to write detectors/extensions that use these mechanisms.
Not exploitable in default config.
See: https://httpoxy.org/
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 13 Oct 2019 17:45:06 -0400 |
| parents | 8e34362a14f7 |
| children | 977e0ef08406 |
line wrap: on
line source
TMP := _tmp HTML := html .PHONY: help clean html linkcheck help: @echo "Please use \`make <target>' where <target> is one of" @echo " html to make standalone HTML files" @echo " linkcheck to check all external links for integrity" clean: -rm -rf $(TMP) $(HTML) docs COPYING.txt docs: ln -s ../../doc ./docs ln -s ../../COPYING.txt html: docs mkdir -p $(TMP)/doctrees $(HTML) sphinx-build -b html -d $(TMP)/doctrees . $(HTML) linkcheck: mkdir -p $(TMP)/linkcheck $(TMP)/doctrees sphinx-build -b linkcheck -d $(TMP)/doctrees . $(TMP)/linkcheck @echo @echo "Link check complete; look for any errors in the above output " \ "or in .build/linkcheck/output.txt."
