diff options
| author | Lauri Ojansivu <x@xet7.org> | 2018-05-26 08:28:16 +0300 |
|---|---|---|
| committer | Lauri Ojansivu <x@xet7.org> | 2018-05-26 08:28:16 +0300 |
| commit | 4d193f5650758a5785e34b2bda274a0748b1cc2a (patch) | |
| tree | 629c06b81110e78d9df36e1356ff79a073f2ad36 /Dockerfile | |
| parent | 73c4806864896559573701044c78a36ecacd9283 (diff) | |
| download | wekan-4d193f5650758a5785e34b2bda274a0748b1cc2a.tar.gz wekan-4d193f5650758a5785e34b2bda274a0748b1cc2a.tar.bz2 wekan-4d193f5650758a5785e34b2bda274a0748b1cc2a.zip | |
Remove bcrypt, continued.
Diffstat (limited to 'Dockerfile')
| -rw-r--r-- | Dockerfile | 11 |
1 files changed, 7 insertions, 4 deletions
@@ -125,12 +125,15 @@ RUN \ gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \ cp /home/wekan/app/fix-download-unicode/cfs_access-point.txt /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ chown wekan:wekan /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ - cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \ - gosu wekan:wekan rm -rf node_modules/bcrypt && \ - gosu wekan:wekan npm install bcrypt && \ + #Removed binary version of bcrypt because of security vulnerability that is not fixed yet. + #https://github.com/wekan/wekan/commit/4b2010213907c61b0e0482ab55abb06f6a668eac + #https://github.com/wekan/wekan/commit/7eeabf14be3c63fae2226e561ef8a0c1390c8d3c + #cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \ + #gosu wekan:wekan rm -rf node_modules/bcrypt && \ + #gosu wekan:wekan npm install bcrypt && \ cd /home/wekan/app_build/bundle/programs/server/ && \ gosu wekan:wekan npm install && \ - gosu wekan:wekan npm install bcrypt && \ + #gosu wekan:wekan npm install bcrypt && \ mv /home/wekan/app_build/bundle /build && \ \ # Cleanup |