1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-11-24 08:57:03 -05:00
forgejo/routers
Gusted 6c75d1a504
fix: require code permissions for branch feed
- The RSS and atom feed for branches exposes details about the code, it
therefore should be guarded by the requirement that the doer has access
to the code of that repository.
- Added integration testing.

(cherry picked from commit 3e3ef76808)
2024-11-15 11:32:24 +01:00
..
api fix: don't show private forks in forks list 2024-11-15 11:32:09 +01:00
common [CHORE] Move to new sessioner library 2024-08-25 03:47:08 +02:00
install [CHORE] Move to new sessioner library 2024-08-25 03:47:08 +02:00
private fix(sec): use constant time check for internal token 2024-10-28 06:17:25 +00:00
utils [PORT] drop utils.IsExternalURL (and expand IsRiskyRedirectURL tests) (#3167) 2024-04-15 13:03:08 +00:00
web fix: require code permissions for branch feed 2024-11-15 11:32:24 +01:00
init.go Revert "Open telemetry integration (#3972)" 2024-08-07 11:22:43 +02:00