Bug 2015969 - Unauthenticated CircleCI webhook allows remote attackers to spoof Harbormaster build target results (PASS/FAIL)

Author: dklawren

src/applications/harbormaster/application/PhabricatorHarbormasterApplication.php

@@ -52,6 +52,11 @@ public function getHelpDocumentationArticles(PhabricatorUser $viewer) {
   }
 
   public function getRoutes() {
+    /* Bug 2015969 */
+    /* 'hook/' => array( */
+    /*   'circleci/' => 'HarbormasterCircleCIHookController', */
+    /*   'buildkite/' => 'HarbormasterBuildkiteHookController', */
+    /* ), */
     return array(
       '/B(?P<id>[1-9]\d*)' => 'HarbormasterBuildableViewController',
       '/harbormaster/' => array(
@@ -95,7 +100,6 @@ public function getRoutes() {
           '(?P<id>\d+)/' => 'HarbormasterLintMessagesController',
         ),
         'hook/' => array(
-          'circleci/' => 'HarbormasterCircleCIHookController',
           'buildkite/' => 'HarbormasterBuildkiteHookController',
         ),
         'log/' => array(