Skip to content

move validate_manifest to after remove_override_files & tweak_toml#102

Merged
emilyalbini merged 2 commits into
rust-lang:masterfrom
syphar:change-order
Jun 20, 2025
Merged

move validate_manifest to after remove_override_files & tweak_toml#102
emilyalbini merged 2 commits into
rust-lang:masterfrom
syphar:change-order

Conversation

@syphar

@syphar syphar commented Jun 19, 2025

Copy link
Copy Markdown
Member

to safeguard against potential future security issues

 to safeguard against potential future security issues
@syphar syphar self-assigned this Jun 19, 2025
@syphar

syphar commented Jun 19, 2025

Copy link
Copy Markdown
Member Author

r? @pietroalbini

Comment thread CHANGELOG.md Outdated
Comment on lines +12 to +13
- move manifest validation to another place in the preparation to safeguard
against potential future security issues.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would mention this as "security hardening".

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you mean as prefix? Or somehow in the sentence?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd probably put "move manifest validation later in the preparation to harden against possible cargo changes.". Mentioning a potential future issue implies we are aware there is going to be an issue in the future.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated

@syphar
syphar requested a review from emilyalbini June 20, 2025 08:36
@emilyalbini
emilyalbini merged commit 8d0a3cb into rust-lang:master Jun 20, 2025
5 checks passed
@syphar
syphar deleted the change-order branch August 21, 2025 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants