-
Notifications
You must be signed in to change notification settings - Fork 887
feat: add custom error message on signups disabled page #11959
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Thanks @mtojek. I think having a minimal markdown that can render links or make them clickable should be done. |
Alright, I'm going to expand it! |
@matifali Ok, please let me know your thoughts! Markdown can be rendered now. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The only possible concern here is a bad actor injecting malicious HTML into the page. However in order to do this they have to get access to modify Coder's deployment values, and if this is the case then the deployment should already be considered compromised.
However, it's no harm to add some tests to validate that basic code injection is handled properly.
Fixes: #11679
Once Coder administrators sets this custom error message:
It will be rendered as follows:
