feat: add safe Gitea sync and signed updates
This commit is contained in:
@@ -19,6 +19,8 @@ const { redactSecrets } = redaction;
|
||||
|
||||
test('rejects credentials embedded in service URLs', () => {
|
||||
assert.throws(() => normalizeBaseUrl(`https://${['jens', 'secret'].join(':')}@gitea.example.test`), /credentials/i);
|
||||
assert.throws(() => normalizeBaseUrl('http://gitea.example.test'), /must use HTTPS/i);
|
||||
assert.equal(normalizeBaseUrl('http://127.0.0.1:3000/'), 'http://127.0.0.1:3000');
|
||||
assert.throws(() => assertHttpUrl(`https://${['user', 'secret'].join(':')}@app.example.test/health`), /credentials/i);
|
||||
});
|
||||
|
||||
|
||||
Reference in New Issue
Block a user