engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(vcs clients filtering): added changes related to vcs client filtering needed for EE. Fixes: RCCE-41

Browse source
This commit is contained in:
Serhii Ilin 2024-09-16 12:44:30 +03:00
parent 50822a3304
commit d174103b5d
9 changed files with 188 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

62
rhodecode/templates/admin/security/edit_allowed_vcs_client_versions.mako Normal file
View file

@ -0,0 +1,62 @@
<style>
.form-group {
margin-bottom: 15px;
}
.form-group label {
display: flex;
align-items: left;
font-weight: bold;
}
.form-control {
width: 60%;
padding: 10px;
font-size: 1rem;
line-height: 1.5;
border: 1px solid #ced4da;
border-radius: 4px;
box-sizing: border-box;
}
.btn-primary {
background-color: #007bff;
border: none;
padding: 10px 20px;
color: white;
font-size: 1rem;
border-radius: 4px;
cursor: pointer;
}
.btn-primary:hover {
background-color: #0056b3;
}
.form-group .help_block {
display: block;
width: 100%;
margin-top: 10px;
text-align: left;
font-size: 0.875rem;
}
</style>
<div>
<div class="form-group">
${h.secure_form(h.route_path('check_2fa'), request=request, id='allowed_clients_form')}
<p><label for="git">${_('git')}:</label>
${h.text('git', class_="form-control", value=initial_git)}</p>
<p><label for="hg">${_('hg')}:</label>
${h.text('hg', class_="form-control", value=initial_hg)}</p>
<p><label for="svn">${_('svn')}:</label>
${h.text('svn', class_="form-control", value=initial_svn)}</p>
%for k, v in errors.items():
<span class="error-message">${k}: ${v}</span>
<br />
%endfor
<p class="help_block">${_('Set rules for allowed git, hg or svn client versions. You can set exact version (for example 2.0.9) or use comparison operators to set earliest or latest version (>=2.6.0)')}</p>
${h.submit('send', _('Save'), class_="btn btn-primary")}
${h.end_form()}
</div>
</div>

43
rhodecode/templates/admin/security/security.mako
View file

@ -28,13 +28,52 @@
<div class="panel-body">
<h4>${_('This feature is available in RhodeCode EE edition only. Contact {sales_email} to obtain a trial license.').format(sales_email='<a href="mailto:sales@rhodecode.com">sales@rhodecode.com</a>')|n}</h4>
<p>
You can scan your repositories for exposed secrets, passwords, etc
${_('You can scan your repositories for exposed secrets, passwords, etc')}
</p>
</div>
</div>
<div class="panel panel-default">
<div class="panel-heading">
<h3 class="panel-title">${_('Allowed client versions')}</h3>
</div>
<div class="panel-body">
%if c.rhodecode_edition_id != 'EE':
<h4>${_('This feature is available in RhodeCode EE edition only. Contact {sales_email} to obtain a trial license.').format(sales_email='<a href="mailto:sales@rhodecode.com">sales@rhodecode.com</a>')|n}</h4>
<p>
${_('Some outdated client versions may have security vulnerabilities. This section have rules for whitelisting versions of clients for Git, Mercurial and SVN.')}
</p>
%else:
<div class="inner form" id="container">
</div>
%endif
</div>
</div>
<script>
$(document).ready(function() {
$.ajax({
url: pyroutes.url('admin_security_modify_allowed_vcs_client_versions'),
type: 'GET',
success: function(response) {
$('#container').html(response);
},
});
$(document).on('submit', '#allowed_clients_form', function(event) {
event.preventDefault();
var formData = $(this).serialize();
$.ajax({
url: pyroutes.url('admin_security_modify_allowed_vcs_client_versions'),
type: 'POST',
data: formData,
success: function(response) {
$('#container').html(response);
},
});
});
});
</script>
</%def>