Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improvements to domain validation #17

Merged
merged 4 commits into from
Nov 17, 2024
Merged

Improvements to domain validation #17

merged 4 commits into from
Nov 17, 2024

Conversation

rsa33
Copy link
Member

@rsa33 rsa33 commented Nov 15, 2024

  • Prevent the creation of new domains when no DNS records are present for either of $domain and www.$domain.
    (Domains resolving to a different server are still permitted so that users can migrate to us without downtime.)

  • Add better validation for domain document roots: enforce being inside public_html, block special characters that may interfere with macros, check the directory already exists, and fix non-canonical paths.

  • Apply the docroot checks consistently across both adding and editing domains.

control/templates/shared/add_vhost_test.html Outdated Show resolved Hide resolved
control/webapp/utils.py Outdated Show resolved Hide resolved
control/webapp/utils.py Outdated Show resolved Hide resolved
@rsa33 rsa33 force-pushed the domain-validation branch from b535272 to d14a52c Compare November 17, 2024 19:58
@rsa33 rsa33 merged commit d14a52c into master Nov 17, 2024
1 check passed
@rsa33 rsa33 deleted the domain-validation branch November 17, 2024 19:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants