framework: genericize private third-party host refs (uscllc) — deferred from P2 #573

Open
opened 2026-06-21 02:06:34 +00:00 by jason.woltje · 0 comments
Owner

Tracked follow-up from PR #572 (P1+P2). The public framework hardcodes a maintainer's private employer Gitea host ( / ) in ~40 sites that are functionally entangled and were deliberately excluded from the P2 sanitization denylist:

  • Functional routing: host cases (git wrappers depend on this — critical path).
  • Test fixtures: , (uconnect fixtures).
  • Docs/examples: , , .

Approach: make host-routing config-driven (no hardcoded private host); genericize test fixtures to example hosts; scrub docs. Then optionally add to the verify-sanitized denylist. Coordinated with Stack Lead: detect-platform is critical, handle carefully. Refs #542.

Tracked follow-up from PR #572 (P1+P2). The public framework hardcodes a maintainer's private employer Gitea host ( / ) in ~40 sites that are functionally entangled and were deliberately excluded from the P2 sanitization denylist: - **Functional routing:** host cases (git wrappers depend on this — critical path). - **Test fixtures:** , (uconnect fixtures). - **Docs/examples:** , , . Approach: make host-routing config-driven (no hardcoded private host); genericize test fixtures to example hosts; scrub docs. Then optionally add to the verify-sanitized denylist. Coordinated with Stack Lead: detect-platform is critical, handle carefully. Refs #542.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#573