replacement for SVNResource in IDP 3.3+

Cantor, Scott cantor.2 at osu.edu
Tue Aug 29 12:00:39 EDT 2017


> Is there any information about implementing these resources?  Are they
> available in IDP 3.3.x?

They're the replacement coming with 3.4 for the deprecated SVN option. Rather than explicitly deal with Git we're just providing a generic way to do it. Not that you can't just do it yourself externally anyway.

One thing we're looking at is how we can possibly block exec calls generically using a Java security manager because right now all the scripting hooks are potentially vulnerable to that if people pull in remote config files.

Without an option to verify signatures on remote files, it's not really an approach I would strongly advise using from within the IdP itself.

-- Scott



More information about the users mailing list