Beyond coding. We forge.
Find a file
KN4CK3R 7ad63bc41e
Disallow dangerous URL schemes (#25960) (#25964)
Regression: https://github.com/go-gitea/gitea/pull/24805
Closes: #25945

- Disallow `javascript`, `vbscript` and `data` (data uri images still
work) url schemes even if all other schemes are allowed
- Fixed older `cbthunderlink` tests

---------

Co-authored-by: delvh <dev.lh@web.de>
(cherry picked from commit ab54310731)
2023-07-24 07:58:56 +02:00
.forgejo [CI] pin test_env:1.20 2023-07-16 23:21:45 +02:00
.gitea [WORKFLOW] issues & pr templates 2023-07-16 23:44:22 +02:00
.github/workflows delete Gitea specific files that need rewriting for Forgejo 2023-07-16 23:44:22 +02:00
assets [BRANDING] add Forgejo logo 2023-07-17 00:25:55 +02:00
build [I18N] Add Locale merger script 2023-07-17 00:25:24 +02:00
cmd [BRANDING] Rebrand dump log 2023-07-17 00:25:56 +02:00
contrib Make environment-to-ini work with INSTALL_LOCK=true (#25926) (#25937) 2023-07-24 07:58:56 +02:00
custom/conf Merge remote-tracking branch 'forgejo/v1.20/forgejo-branding' into v1.20/forgejo 2023-07-17 08:01:16 +02:00
docker Merge remote-tracking branch 'forgejo/v1.20/forgejo-dependency' into v1.20/forgejo 2023-07-17 08:01:29 +02:00
docs Revert "Restrict [actions].DEFAULT_ACTIONS_URL to only github or self (#25581) (#25604)" 2023-07-16 23:21:44 +02:00
models Merge remote-tracking branch 'forgejo/v1.20/forgejo-dependency' into v1.20/forgejo 2023-07-17 08:01:29 +02:00
modules Disallow dangerous URL schemes (#25960) (#25964) 2023-07-24 07:58:56 +02:00
options Merge remote-tracking branch 'forgejo/v1.20/forgejo-moderation' into v1.20/forgejo 2023-07-17 08:01:23 +02:00
public [BRANDING] Custom loading animation for Forgejo 2023-07-17 00:25:55 +02:00
releases [DOCS] RELEASE-NOTES.md 2023-07-16 23:44:22 +02:00
routers Ignore runs-on with expressions when warning no matched runners (#25917) (#25933) 2023-07-24 07:58:56 +02:00
services Merge remote-tracking branch 'forgejo/v1.20/forgejo-moderation' into v1.20/forgejo 2023-07-17 08:01:23 +02:00
snap Upgrade snap to node 20 (#24990) 2023-05-29 22:41:56 +02:00
templates Merge remote-tracking branch 'forgejo/v1.20/forgejo-moderation' into v1.20/forgejo 2023-07-17 08:01:23 +02:00
tests [GITEA] do not enforce misc scope tokens for public API endpoints 2023-07-23 22:35:11 +02:00
web_src [GITEA]: Render status of list items for Org mode 2023-07-19 23:00:56 +02:00
.air.toml Reduce verbosity of dev commands (#24917) 2023-05-24 20:11:04 +00:00
.changelog.yml Changelog for v1.15.0-rc1 (#16422) 2021-07-15 11:47:57 -04:00
.dockerignore Remove the service worker (#25010) 2023-05-31 02:07:04 +00:00
.drone.yml build nightly docker images (#25317) (#25333) 2023-06-18 11:09:30 +00:00
.editorconfig Add markdownlint (#20512) 2022-07-28 09:22:47 +08:00
.eslintrc.yaml Update js dependencies (#25137) (#25151) 2023-06-08 12:05:13 +00:00
.gitattributes Remove more unused Fomantic variants (#25292) (#25323) 2023-06-17 17:14:25 +02:00
.gitignore [I18N] Makefile + gitignore 2023-07-17 00:25:24 +02:00
.gitpod.yml Use official Vue extension in Gitpod (#24609) 2023-05-09 18:03:50 +00:00
.golangci.yml Refactor INI package (first step) (#25024) 2023-06-02 17:27:30 +08:00
.ignore Remove the service worker (#25010) 2023-05-31 02:07:04 +00:00
.markdownlint.yaml Add markdownlint (#20512) 2022-07-28 09:22:47 +08:00
.npmrc Upgrade to npm lockfile v3 and explicitely set it (#23561) 2023-03-18 19:38:10 +01:00
.spectral.yaml Add spectral linter for Swagger (#20321) 2022-07-11 18:07:16 -05:00
.stylelintrc.yaml Update JS dependencies, remove space after emoji completion (#25266) (#25352) 2023-06-20 05:38:52 +00:00
BSDmakefile update BSDmakefile to latest version from upstream (#24063) 2023-04-11 23:42:22 -04:00
build.go User/Org Feed render description as per web (#23887) 2023-04-04 04:39:47 +01:00
CHANGELOG.md Add 1.20.0 changelog (#25901) (#25910) 2023-07-16 21:08:53 +02:00
CODE_OF_CONDUCT.md Add Gitea Community Code of Conduct (#23188) 2023-03-09 10:49:34 +08:00
CONTRIBUTING.md [DOCS] CONTRIBUTING 2023-07-16 23:44:22 +02:00
DCO Remove address from DCO (#22595) 2023-01-24 18:52:38 +00:00
Dockerfile [BRANDING] symlink gitea to forgejo in docker containers 2023-07-17 00:25:56 +02:00
Dockerfile.rootless [BRANDING] symlink gitea to forgejo in docker containers 2023-07-17 00:25:56 +02:00
go.mod Disallow dangerous URL schemes (#25960) (#25964) 2023-07-24 07:58:56 +02:00
go.sum Disallow dangerous URL schemes (#25960) (#25964) 2023-07-24 07:58:56 +02:00
LICENSE [DOCS] LICENSE: add Forgejo Authors 2023-07-16 23:44:22 +02:00
main.go [BRANDING] alias {FORGEJO,GITEA}_{CUSTOM,WORK_DIR} 2023-07-17 00:25:56 +02:00
MAINTAINERS Add self to maintainers (#23644) 2023-05-25 07:58:38 +08:00
Makefile Merge remote-tracking branch 'forgejo/v1.20/forgejo-branding' into v1.20/forgejo 2023-07-17 08:01:16 +02:00
package-lock.json Always pass 6-digit hex color to monaco (#25780) (#25782) 2023-07-09 13:06:13 +02:00
package.json Always pass 6-digit hex color to monaco (#25780) (#25782) 2023-07-09 13:06:13 +02:00
playwright.config.js Update JS dependencies and eslint config (#21388) 2022-10-10 20:02:20 +08:00
README.md [BRANDING] add Forgejo logo 2023-07-17 00:25:55 +02:00
RELEASE-NOTES.md [DOCS] RELEASE-NOTES: 1.20.0-0-rc0 2023-07-16 23:44:22 +02:00
vitest.config.js Update JS dependencies (#24218) 2023-04-19 22:36:41 -04:00
webpack.config.js [API] Forgejo API /api/forgejo/v1 2023-07-16 23:44:22 +02:00

Welcome to Forgejo

Hi there! Tired of big platforms playing monopoly? Providing Git hosting for your project, friends, company or community? Forgejo (/for'd͡ʒe.jo/ inspired by forĝejo the Esperanto word for forge) has you covered with its intuitive interface, light and easy hosting and a lot of builtin functionality.

Forgejo was created in 2022 because we think that the project should be owned by an independent community. If you second that, then Forgejo is for you! Our promise: Independent Free/Libre Software forever!

What does Forgejo offer?

If you like any of the following, Forgejo is literally meant for you:

  • Lightweight: Forgejo can easily be hosted on nearly every machine. Running on a Raspberry? Small cloud instance? No problem!
  • Project management: Besides Git hosting, Forgejo offers issues, pull requests, wikis, kanban boards and much more to coordinate with your team.
  • Publishing: Have something to share? Use releases to host your software for download, or use the package registry to publish it for docker, npm and many other package managers.
  • Customizable: Want to change your look? Change some settings? There are many config switches to make Forgejo work exactly like you want.
  • Powerful: Organizations & team permissions, CI integration, Code Search, LDAP, OAuth and much more. If you have advanced needs, Forgejo has you covered.
  • Privacy: From update checker to default settings: Forgejo is built to be privacy first for you and your crew.
  • Federation: (WIP) We are actively working to connect software forges with each other through ActivityPub, and create a collaborative network of personal instances.

Learn more

Dive into the documentation, subscribe to releases and blog post on our website, find us on the Fediverse or hop into our Matrix room if you have any questions or want to get involved.

Get involved

If you are interested in making Forgejo better, either by reporting a bug or by changing the governance, please take a look at the contribution guide.