From 2c96097e9712366f2aa9c36caf84e2578064e7a2 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Jul 12 2016 09:15:57 +0000 Subject: These endpoints are actually called via JS and thus are not only local Marking these endpoints are localonly will prevent them from working on deployed instances since then it's the user's IP that provided. --- diff --git a/pagure/internal/__init__.py b/pagure/internal/__init__.py index 5584a2a..213c746 100644 --- a/pagure/internal/__init__.py +++ b/pagure/internal/__init__.py @@ -176,7 +176,6 @@ def ticket_add_comment(): @PV.route('/pull-request/merge', methods=['POST']) -@localonly def mergeable_request_pull(): """ Returns if the specified pull-request can be merged or not. """ @@ -237,7 +236,6 @@ def mergeable_request_pull(): @PV.route('/pull-request/ready', methods=['POST']) -@localonly def get_pull_request_ready_branch(): """ Return the list of branches that have commits not in the main branch/repo (thus for which one could open a PR) and the number of @@ -336,7 +334,6 @@ def get_pull_request_ready_branch(): @PV.route('//issue/template', methods=['POST']) @PV.route('/fork///issue/template', methods=['POST']) -@localonly def get_ticket_template(repo, username=None): """ Return the template asked for the specified project """