Skip to content

schema: Set enableGitServerCommandExecFilter to true by default

Warren Gifford requested to merge ig/enable-gitserver-patch into main

Created by: indradhanush

We have not seen any warning logs that match "IsAllowedGitCmd" in gitserver for the last 24 hours. As a result the security patch can be safely enabled by default. In case of any regressions, this flag can be set to false in the site configuration.

Logs here.

Should be the final PR to help complete https://github.com/sourcegraph/security-issues/issues/213.

Test plan

Setting the default value of a config. No additional test required.

Merge request reports

Loading