Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scriptsAppStore can be set to non-github source by using "@". #2014

Open
Sodium-Aluminate opened this issue Dec 5, 2024 · 0 comments
Open

Comments

@Sodium-Aluminate
Copy link

when an admin executed /carpet scriptsAppStore foo:[email protected], it will call AppStoreManager.setScarpetRepoLink("https://api.github.com/repos/foo:[email protected]/"), then scarpetRepoLink will be set to it, and the server will finally create a new URL with it.

Due URL format, the domain of https://api.github.com/repos/foo:[email protected]/somepath is example.com.
(api.github.com/repos/foo is username and bar is password)

Maybe it can be used for server admins to get the real IP addr of the server bypass the proxy (like velocity) by deploy a http server and check the access log. ¯\_(ツ)_/¯

(of cource, it can also be used to set scriptsAppStore to a private repo if you don't want to share your scarpet code to others)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant