Skip to content

Commit

Permalink
refactor(api): Refactor onbehalfOf checks
Browse files Browse the repository at this point in the history
Check the onBehalfOf once when a new PR is discovered if not matching
  • Loading branch information
u2032 committed Dec 2, 2022
1 parent 4c3f13d commit 9491f0a
Show file tree
Hide file tree
Showing 4 changed files with 222 additions and 200 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ The GitHub token you provide is used by the dashboard but shared with nobody. Al
Moreover, no third-party script are loaded by the page (mainly to avoid the risk of a compromised library) and all implemented scripts by this project are protected by an integrity hash and a strict Content Security Policy.
It means that the browser will not execute anything else than what is expected, decreasing the risk to have your GitHub token stolen by someone.

#### Generating the integrety hashes
#### Generating the integrity hashes

Here are the command used to generate the hashes:
```shell
Expand Down
4 changes: 2 additions & 2 deletions docs/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Noto+Sans">

<script type="text/javascript" src="./scripts/controls.js" integrity="sha384-h1acJr1fAELUSOVWsm0vhc53glFobYEmxKu/za/AdvYnnFiuMIUd6qm5IaREYbmN" defer></script>
<script type="text/javascript" src="./scripts/github.js" integrity="sha384-rB2dTGRPbyL6Bes4rQWASL0EcNQY1MFKLxyzrdM8XQIGg8bdd28AH5nzXpb0Z+yl" defer></script>
<script type="text/javascript" src="./scripts/github.js" integrity="sha384-Tb1oZVoOWbXaWHMak1vHZRPQNtf439pv1nar0jKW61cihFuy8c6zfJFgB0tja3Ah" defer></script>

<link rel="apple-touch-icon" sizes="180x180" href="./assets/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="./assets/favicon-32x32.png">
Expand Down Expand Up @@ -61,7 +61,7 @@ <h1>Pull Requests Buddy</h1>
</p>
<p>
This token stays client's side in your browser and is not sent to a server. Actually, the whole
content of this page and dashboard is generated client's side and doesn't male any call to a service
content of this page and dashboard is generated client's side and doesn't make any call to a service
except GitHub itself to retrieve the information.
</p>
</div>
Expand Down
Loading

0 comments on commit 9491f0a

Please sign in to comment.