google-nomulus/core
Michael Muller 29bf0f3965
Make BiqueryPollJobAction endpoint internal only (#955)
* Make BiqueryPollJobAction endpoint internal only

This endpoint makes use of java object deserialization, which allows a
malicious actor to craft a request that can initiate overly broad actions on
the server.  Since this endpoint is not widely used for operational purposes,
limit its authorization to "internal only" so that no user agents (even with
admin privs) can access it.
2021-02-05 07:50:51 -05:00
..
gradle/dependency-locks Add a Secret Manager client for Nomulus (#872) 2020-11-12 17:12:52 -05:00
src Make BiqueryPollJobAction endpoint internal only (#955) 2021-02-05 07:50:51 -05:00
WEB-INF/appengine-generated Enable Cloud SQL when Datastore is enabled for unit test (#502) 2020-03-10 12:26:25 -04:00
build.gradle A better Datastore bulk delete tool (#947) 2021-02-02 22:46:38 -05:00
Dockerfile Build docker image of nomulus tool (#142) 2019-07-16 20:18:44 -04:00
karma.conf.js Clean up generated sources configuration (#724) 2020-07-30 15:43:42 -04:00