Hi Bruno,
Agreed , this is mostly a security concern, something which I have the least expertise. All I can say its perhaps possible to implement using post and an identifier but beyond that Luke Macken or anyone who is a security expert will be able to help you better with this.
On 07/25/2016 11:46 AM, Bruno Wolff III wrote:
On Mon, Jul 25, 2016 at 10:30:57 -0400, rkolathu rkolathu@redhat.com wrote:
Hi bruno
Thanks for the great suggestion, having a button to do push requests from the testing branch to the stable one seems like a great idea and implementable as well. However I could not understand the part about not having to enable to javascript. If you could explain me more about this it will be great. Meanwhile opening an RFE in the github page https://github.com/fedora-infra/bodhi/issues would be great as well
Turning on javascript significantly increases the risk on being compromised through a browser. While I implicitly trust Fedora since I am running Fedora code on my laptops, server and work desktop, having to turn it on still poses some increase in that bodhi specifically is compromised or that I forget to turn it off when looking at some place else.