Do not allow credentials to be present in the URLs that are provided for migrations and push mirrors. They have to be given via the dedicated input fields. Give a error when this happens. There's nothing wrong with trying have the backend "correct" this, but would be a larger patch than necessary in the context of a security fix. This can be done in public. |
||
|---|---|---|
| .. | ||
| gitignore | ||
| label | ||
| license | ||
| locale | ||
| locale_next | ||
| readme | ||
| locale_readme.md | ||