Uh oh!
There was an error while loading. Please reload this page.
Do not update apps if it comes from git - #7505
Conversation
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
| if ($this->isInstalledFromGit($appId) === true) { | ||
| return false; | ||
| } |
There was a problem hiding this comment.
Could we move this check one up ... just to return earlier in the method?
rullzer
left a comment
There was a problem hiding this comment.
Works for the 99% use case for me! Lets do this.
ChristophWurst
commented
Dec 14, 2017
What happens if a developer accidentally packages the |
skjnldsv
commented
Dec 14, 2017
@ChristophWurst Yup! |
MorrisJobke
commented
Dec 14, 2017
|
Codecov Report
@@ Coverage Diff @@## master #7505 +/- ##
============================================
+ Coverage 51.11% 51.16% +0.05% + Complexity 24903 24868 -35
============================================
Files 1601 1601 Lines 94778 94691 -87 Branches 1368 1368 ============================================
+ Hits 48445 48452 +7 + Misses 46333 46239 -94
|
skjnldsv
commented
Dec 14, 2017
We could also refuse to install an app if it has a .git in it ;) |
MorrisJobke
commented
Dec 14, 2017
@ChristophWurst@skjnldsv Another idea: only reject this if the nextcloud itself is also a git clone (update channel === git) 😉 |
MorrisJobke
commented
Dec 14, 2017
@BernhardPosselt Mentioned that we maybe should also add checks for other typical VCS systems and have a blacklist:
Anything else? |
skjnldsv
commented
Dec 14, 2017
@MorrisJobke I would say no, because I sometimes uses default apps without using their git repo :) |
jancborchardt
commented
Dec 14, 2017
cc @Henni for review as he also had this issue :) |
MorrisJobke
commented
Dec 18, 2017
Okay - let's go for the |
We had a lot of issues as devs by those auto update...
Fixes#7011