summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFlorian Zschocke <f.zschocke+git@gmail.com>2020-03-07 12:01:08 +0100
committerFlorian Zschocke <f.zschocke+git@gmail.com>2020-04-04 15:18:55 +0200
commit8b18ac309bc36c8a16a3d26f088cb168635930d3 (patch)
treeb3c9af78f49eccdc942d67e9439fc38486339307
parentfffdda5a20b5fc3e4c6a4c11443109c1232c7e39 (diff)
downloadgitblit-8b18ac309bc36c8a16a3d26f088cb168635930d3.tar.gz
gitblit-8b18ac309bc36c8a16a3d26f088cb168635930d3.zip
docu: Fix typo
-rw-r--r--src/site/rpc.mkd2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/site/rpc.mkd b/src/site/rpc.mkd
index e51fbaae..ac963a87 100644
--- a/src/site/rpc.mkd
+++ b/src/site/rpc.mkd
@@ -8,7 +8,7 @@ Gitblit optionally allows a remote client to administer the Gitblit server. Thi
web.enableRpcManagement=false
web.enableRpcAdministration=false
-**https** is strongly recommended because passwords are insecurely transmitted form your browser/rpc client using Basic authentication!
+**https** is strongly recommended because passwords are insecurely transmitted from your browser/rpc client using Basic authentication!
The Gitblit JSON RPC mechanism, like the Gitblit JGit servlet, syndication/feed servlet, etc, supports request-based authentication. Making an *admin* request will trigger Gitblit's basic authentication mechanism. Listing of repositories, generally, will not trigger this authentication mechanism unless *web.authenticateViewPages=true*. That means its possible to allow anonymous enumeration of repositories that are not *view restricted* or *clone restricted*. Of course, if credentials are provided then all private repositories that are available to the user account will be enumerated in the JSON response.