Skip to content

Harden local Allure report preview serving - #3393

Merged
baev merged 2 commits into
mainfrom
sec
Jun 17, 2026
Merged

Harden local Allure report preview serving#3393
baev merged 2 commits into
mainfrom
sec

Conversation

@baev

@baev baev commented Jun 17, 2026

Copy link
Copy Markdown
Member

Context

allure serve and allure open now treat the built-in web server as a local preview surface only. The preview server refuses non-loopback binds and non-local Host headers, applies browser hardening headers to report responses, and clearly guides users to generate static reports and host them with a production web server for shared deployments.

Checklist

@baev baev added pr:improvement Change that improves some user experience but can't be considered as a new feature pr:security Security vulnerability or fix and removed theme:commandline pr:improvement Change that improves some user experience but can't be considered as a new feature labels Jun 17, 2026
@github-actions

Copy link
Copy Markdown

Allure Report Summary

Name Duration Stats New Flaky Retry Report
Allure 2 – Pull request #3393 11m 9s Passed tests 385   Skipped tests 1 16 0 0 View

@baev
baev merged commit c47f83d into main Jun 17, 2026
29 checks passed
@baev
baev deleted the sec branch June 17, 2026 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr:security Security vulnerability or fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants