Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Revised AvatarGenerator to be injectable | James Moger | 2015-06-15 | 1 | -0/+5 |
| | |||||
* | Remove /org/ filtering | James Moger | 2015-05-21 | 1 | -19/+12 |
| | |||||
* | Deny access to /com and /org folders in GO setup | Jean-Baptiste Mayer | 2015-04-14 | 1 | -1/+20 |
| | | | | | Added a servlet to serve "Access Denied" Added conditional mapping of /com and /org folders in the web setup | ||||
* | Restore all security filters | James Moger | 2014-07-03 | 1 | -5/+10 |
| | |||||
* | Use Guice annotations, not javax.inject annotations | James Moger | 2014-07-03 | 1 | -1/+2 |
| | |||||
* | Use Guice-Servlet rather than custom code and expose the Injector | James Moger | 2014-07-03 | 1 | -0/+99 |
This is a fairly functional variation of Gitblit with one notable exception: The security filters are not working properly. This is a design flaw in Guice that I have reported upstream [1]. The general idea is that Guice-Servlet filters are not properly wrapping the ServletRequest. This has historically been a problem for Guice-Servlet servlets but Google has fixed most of those issues. Unfortunately, all the same flaws reported against the servlet delegation also exist in Guice-Servlet filter delegation. :( [1]: https://code.google.com/p/google-guice/issues/detail?id=807 |