Hi Bruno,
Agreed , this is mostly a security concern, something which I have the
least expertise. All I can say its perhaps possible to implement using
post and an identifier but beyond that Luke Macken or anyone who is a
security expert will be able to help you better with this.
On 07/25/2016 11:46 AM, Bruno Wolff III wrote:
On Mon, Jul 25, 2016 at 10:30:57 -0400,
rkolathu <rkolathu(a)redhat.com> wrote:
> Hi bruno
>
> Thanks for the great suggestion, having a button to do push requests
> from the testing branch to the stable one seems like a great idea and
> implementable as well. However I could not understand the part about
> not having to enable to javascript. If you could explain me more
> about this it will be great. Meanwhile opening an RFE in the github
> page
https://github.com/fedora-infra/bodhi/issues would be great as well
Turning on javascript significantly increases the risk on being
compromised through a browser. While I implicitly trust Fedora since I
am running Fedora code on my laptops, server and work desktop, having
to turn it on still poses some increase in that bodhi specifically is
compromised or that I forget to turn it off when looking at some place
else.