[TYPO3-dev] SVN, FORGE and hidden projects: Not that hidden...

Christoph Koehler christoph.koehler at gmail.com
Tue May 26 22:37:48 CEST 2009


On 5/26/09 9:44 AM, Ingo Renner wrote:
> Olivier Schopfer wrote:
>
>> Try to open https://svn.typo3.org/TYPO3v4/Extensions/ and you will have
>> access to the source code of all projects, including the "hidden" ones.
>>
>> Should this be considered a security issue? A bug?
>
> none of that. The svn access/lisitng over HTTP has nothing to do with
> the access through forge. Forge simply is a project management system
> for extension projects. Through forge you can specify who is allowed to
> write to SVN, and provide some more information about your extension
> project, nothing more, nothing less.
>
> If you don't want to share your code, don't put it on forge.
>
>
> best
> Ingo
>

We have svn and forge set up to require authentication for private 
projects, so they can't be browsed.

Christoph




More information about the TYPO3-dev mailing list