3 ms·
Using the repo prefix allows them to put the same auth on uploads. So if you don’t have access to a repo, you can’t access files uploaded in its issues either.
by captn3m0 3y ago
Using the repo prefix allows them to put the same auth on uploads. So if you don’t have access to a repo, you can’t access files uploaded in its issues either.
- kevincox 3y agoI'm not saying that they don't need to check auth by repo. They can still check the auth when they look up the metadata for the file. Just don't include it in the URL. The auth difficulty may make moving the files to a different domain more difficult, but same domain path shouldn't matter.