-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Open
@mustard-mh
Description
We check and auth workspace cookie in workspace origin, but that cookie is httpOnly, which means this if will not work
Code pointer
if (!document.cookie.includes(`${instanceID}_owner_`)) {
| Cookie policy | Six requests from StartWorkspace.tsx |
|---|---|
| image | image |
How to reproduce
- Open workspace https://gitpod.new with browser code
- Exec
curl lama.sh | shto listen to port - Go to Ports tab next to Terminal tab in browser
- Switch port private/public state and check with Browser DevTools / Network or Console
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
No status