-
-
Notifications
You must be signed in to change notification settings - Fork 856
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
tec: Remove data/do-install.txt #3555
Conversation
43e72d6
to
b2817a6
Compare
This file was painful during update because we had to remember to delete it each time. It added a security issue by allowing an attacker to reinstall FreshRSS during the update process. The (more powerful) file data/applied_migrations.txt has been introduced in 8619cf6 to replace do-install.txt. We had to wait for at least one release in order to make sure existing instances of FreshRSS created the migration file. It should be ok now.
b2817a6
to
0de8780
Compare
Hi, I am hosting FreshRSS with Heroku, which wipes local filesystem changes on a regular basis. After upgrading FreshRSS from 1.17 to 1.18, the installation screen appeared. And whenever Heroku did its periodic filesystem wipe, the installation screen returned. Reading the changes to To avoid the installation screen from re-appearing repeatedly, I removed the Just want to note this in case others have similar web hosts with only short-lived filesystem persistence. The old |
@pthall Heroku should not touch |
Everything persisted under |
Indeed, if you have to commit the files under Just to clarify how the new
|
Changes proposed in this pull request:
How to test the feature manually:
touch data/do-install.txt
rm data/do-install.txt
andtouch data/applied_migrations.txt
to be in initial statePull request checklist:
Additional information can be found in the documentation.