-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Open
Labels
component: dashboardmeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp team
Description
We check and auth workspace cookie in workspace origin, but that cookie is httpOnly, which means this if
will not work
Code pointer
if (!document.cookie.includes(`${instanceID}_owner_`)) { |
Cookie policy | Six requests from StartWorkspace.tsx |
---|---|
![]() |
![]() |
How to reproduce
- Open workspace https://gitpod.new with browser code
- Exec
curl lama.sh | sh
to listen to port - Go to Ports tab next to Terminal tab in browser
- Switch port private/public state and check with Browser DevTools / Network or Console
Metadata
Metadata
Assignees
Labels
component: dashboardmeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp team
Type
Projects
Status
No status