action #2434
closed
get rid of environment variables
Added by lnussel over 10 years ago.
Updated over 10 years ago.
Description
openqa shouldn't use environment variables. When allowing the webui to set arbitrary environment variables a malicious user may use e.g. LD_PRELOAD. So let's use a different %config hash instead of %ENV.
- Priority changed from Normal to High
- Estimated time set to 8.00 h
using a JSON string as a means of transport for %config (e.g. via %ENV{config} or a file) seems to be the best way then.
- Status changed from New to In Progress
- % Done changed from 0 to 100
- Status changed from In Progress to Resolved
Also available in: Atom
PDF