Skip to content

api.views: try handover fixes (bug 2019417)#948

Closed
zzzeid wants to merge 1 commit intomainfrom
zeid/bug-2019417-pull_head_sha
Closed

api.views: try handover fixes (bug 2019417)#948
zzzeid wants to merge 1 commit intomainfrom
zeid/bug-2019417-pull_head_sha

Conversation

@zzzeid
Copy link
Contributor

@zzzeid zzzeid commented Feb 25, 2026

  • add pull_head_sha to try_task_config.json
  • add csrf_exempt decorator to endpoint

- add pull_head_sha to try_task_config.json
- add csrf_exempt decorator to endpoint
@github-actions
Copy link

View this pull request in Lando to land it once approved.

@zzzeid zzzeid marked this pull request as ready for review February 25, 2026 21:33
@zzzeid zzzeid requested a review from a team as a code owner February 25, 2026 21:33
return JsonResponse(warnings_and_blockers)


@method_decorator(csrf_exempt, name="dispatch")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: It may actually make sense to keep the CSRF here.

Unless we want others than the PR view page to be able to create a try job?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah this is added so that external services (e.g., code-review-bot) can use this endpoint. I think since we require an authenticated user for all requests to this endpoint, we should be OK.

Copy link
Member

@shtrom shtrom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Questions on CSRF removal, but LGTM otherwise.

@lando-prod-mozilla
Copy link

Pull request closed by commit 8ab6849

lando-prod-mozilla bot pushed a commit that referenced this pull request Feb 26, 2026
- add pull_head_sha to try_task_config.json
- add csrf_exempt decorator to endpoint

Pull request: #948
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants