Ulgh I force-pushed to my repo and thought I force pushed to this repo and erroneously declared victory since CICD passed. I think github internally stores everything in the same git repo since clicking this
takes you here which doesn't exist, but does exist on my repo.
Very, very confusing. Anyway it seems like I accidentally git-submoduled my repo instead of this repo... but it still works because Github is trash at security . This is more or less an accidental insecure direct object reference attack, but with two public repos (instead of 2 private ones). Gotta love security. (From one repo, I can directly access the git-objects of another repo, just because it's a fork.)
Also, it turns out I don't have permissions to force-push the fsrs-browser branch, so we can either merge or someone else can force-push the fsrs-browser branch to the ed628b09c5889e870e70c01f89ac1526325583d8 hash.
Ulgh I force-pushed to my repo and thought I force pushed to this repo and erroneously declared victory since CICD passed. I think github internally stores everything in the same git repo since clicking this
takes you here which doesn't exist, but does exist on my repo.
Very, very confusing. Anyway it seems like I accidentally git-submoduled my repo instead of this repo... but it still works because Github is trash at security . This is more or less an accidental insecure direct object reference attack, but with two public repos (instead of 2 private ones). Gotta love security. (From one repo, I can directly access the git-objects of another repo, just because it's a fork.)
Also, it turns out I don't have permissions to force-push the
fsrs-browser
branch, so we can either merge or someone else can force-push thefsrs-browser
branch to theed628b09c5889e870e70c01f89ac1526325583d8
hash.