Skip to content

Commit 31b818a

Browse files
bmispelonfelixxm
authored andcommitted
Disabled about page and web upload of plugins.
The about page was not linked from any page, and would expose sensitive environment variable to admins. Web upload of plugins was not used and is undesirable for us.
1 parent d9356b4 commit 31b818a

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

trac-env/conf/trac.ini

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ wiki_format_messages = enabled
1111

1212
[components]
1313
navhider.filter.* = enabled
14+
trac.about.* = disabled
15+
trac.admin.web_ui.PluginAdminPanel = disabled
1416
trac.ticket.query.* = enabled
1517
trac.ticket.query.querymodule = enabled
1618
trac.ticket.query.ticketquerymacro = enabled

0 commit comments

Comments
 (0)