adamgoucher

Minutes from the February 13, 2020 Selenium Project Status Meeting

Project Statistics
Open Pull Requests: 120
Open Issues: 486

Governance Proposal
- https://github.com/SeleniumHQ/seleniumhq.github.io/pull/108
- Merge / Close decision postponed until after the next call with SFC to get a their feedback

adamgoucher

Bi-weekly Selenium Project Meeting-like-thing (Feb 13, 2020)
============================================================
0. Opening Ceremony
- Rollcall
- Tickets
- Pull Requests

1. Governance
- Do we need to extend the deadline?
- Do the people in the doc listed as committee members accept the [continued] role?

adamgoucher

Secure Node Registration

Description

Right now, anyone who knows a Selenium Grid Hub node can register as a Node on it. This is is convenient, but also means a bad actor could register on your Hub and intercept your scripts. In order to counter this the Grid 4.x needs to be able to restrict node registration.

Possible Impementations

adamgoucher

Adams-MacBook-Pro:tether adamgoucher$ git diff bootstrap/app.php
diff --git a/bootstrap/app.php b/bootstrap/app.php
index 36a1fa6a9..d9958cd28 100755
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -1,5 +1,8 @@
 <?php

+use Monolog\Formatter\JsonFormatter;
+use Monolog\Handler\RotatingFileHandler;

adamgoucher

$ vagrant up --debug
 INFO global: Vagrant version: 1.9.1
 INFO global: Ruby version: 2.2.5
 INFO global: RubyGems version: 2.4.5.1
 INFO global: VAGRANT_INSTALLER_ENV="1"
 INFO global: VAGRANT_INSTALLER_VERSION="2"
 INFO global: VAGRANT_INSTALLER_EMBEDDED_DIR="/opt/vagrant/embedded"
 INFO global: VAGRANT_OLD_ENV_TERM_PROGRAM_VERSION="3.0.13"
 INFO global: VAGRANT_OLD_ENV_OLDPWD="/Users/adamgoucher/tmp"
 INFO global: VAGRANT_OLD_ENV_LANG="en_CA.UTF-8"

adamgoucher

<?php

namespace App\Console\Commands;

use Illuminate\Console\Command;
use \Laravel\Passport\Client;

class CheckForPassportClient extends Command
{
    /**

adamgoucher

# -*- mode: ruby -*-
# vi: set ft=ruby :

unless Vagrant.has_plugin?("vagrant-hosts")
  raise 'vagrant-hosts plugin not installed; https://github.com/oscar-stack/vagrant-hosts'
end

unless Vagrant.has_plugin?("vagrant-puppet-install")
  raise 'vagrant-puppet-install plugin not installed; https://github.com/petems/vagrant-puppet-install'
end

adamgoucher

	/*
	|--------------------------------------------------------------------------
	| Application Locale Heirachy
	|--------------------------------------------------------------------------
	|
	| The locales mapping specifies the heirarchy of locales. This allows for
	| client-based as well as regional-based language overrides without having
	| to maintain full language files for each one. The fallback_locale remains
	| top of heirarchy
	|

adamgoucher

import requests
from StringIO import StringIO
import gzip
import re

def get_hosted_version(release):
    r = requests.get('http://YOUR_SERVER/dists/%s/main/binary-i386/Packages.gz' % release)
    packages = gzip.GzipFile(fileobj=StringIO(r.content))

    # break into individual package sections

adamgoucher

import boto3

longest = 0;
data = {}

client = boto3.client('iam')
for certificate in client.list_server_certificates()['ServerCertificateMetadataList']:
    if len(certificate['ServerCertificateName']) > longest:
        longest = len(certificate['ServerCertificateName'])
    data[certificate['Expiration']] = {