Incorrect provider_url configuration for swmath on staging deposit
swmath has two accounts:
swh-deposit=> select * from deposit_client where user_ptr_id in (16, 17);
user_ptr_id | collections | provider_url | domain
-------------+-------------+----------------------------+------------
16 | {14} | https://staging.swmath.org | swmath.org
17 | {14} | https://staging.swmath.org | swmath.org
And for both, the provider_url
is missing a trailing slash, which means they can deposit to other domains than their own, eg. https://staging.swmath.org.example.com/foo`
Edited by vlorentz