-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[APPS-6948] Add manifest validation to deprecate password type param #364
Conversation
72500b7
to
d72b179
Compare
@@ -22,7 +22,7 @@ def call(package) | |||
return [ValidationError.new(:missing_manifest)] | |||
end | |||
|
|||
collate_manifest_errors(package) | |||
collate_manifest_errors(package, opts.fetch(:skip_password_parameter_check, true) ) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe I've been a manager too long, but I'm finding this a bit hard to follow. We default the skip_password_parameter
value to false here, then default it to true here then apply the rule conditionally with a double negative.
Would it be simpler to change the variable name to apply_parameter_check
and just give it the appropriate default value in one place?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yeah that would be more readable. I have updated it now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could we get the PR description updated with the new implementation using apply_parameter_check
please?
b99ed3f
to
989c20c
Compare
989c20c
to
6df7579
Compare
6df7579
to
1a3fcad
Compare
This moved to #366 |
💐
/cc @zendesk/wattle
Description
Add manifest validation to disallow password type params.
The check is based on enabling
skip_password_parameter_check
to ensure this validation works only for new app submission. The value will be passed in from Apps approval and ZAM.The skip_password_parameter_check value will be passed in from Apps Approval gem here.
References
https://zendesk.atlassian.net/browse/APPS-6946
Risks