← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1580325] [NEW] collectstatic should ignore JS unit test .spec.js files

 

Public bug reported:

Currently when collectstatic is run, all javascript is gathered up
including .spec.js files. There doesn't seem to be any benefit from
making these available to a deployed horizon instance and while I can't
find any evidence that it creates any specific problems it seems messy.
This got noticed by an automatic scanning tool discovering some of the
spec files and running some exploit attempts on them which resulted in
false positives.

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1580325

Title:
  collectstatic should ignore JS unit test .spec.js files

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Currently when collectstatic is run, all javascript is gathered up
  including .spec.js files. There doesn't seem to be any benefit from
  making these available to a deployed horizon instance and while I
  can't find any evidence that it creates any specific problems it seems
  messy. This got noticed by an automatic scanning tool discovering some
  of the spec files and running some exploit attempts on them which
  resulted in false positives.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1580325/+subscriptions