forgejo/routers/web
Loïc Dachary d9da20aa9a
[GITEA] fix POST /{username}/{reponame}/{type:issues|pulls}/move_pin
Refs: https://forgejo.org/2023-11-release-v1-20-5-1/#api-and-web-endpoint-vulnerable-to-manually-crafted-identifiers

(cherry picked from commit 7eda733ed6a22c08a85fdc90deec0c440427cef7)
(cherry picked from commit 2d9d2979e6)
(cherry picked from commit 6483bceee2)
(cherry picked from commit 589d10a181)
2023-12-04 14:22:21 +01:00
..
admin Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
auth [GITEA] oauth2: use link_account page when email/username is missing (#1757) 2023-12-04 14:22:21 +01:00
devtest Make "cancel" buttons have proper type in modal forms (#25618) 2023-07-03 14:04:50 +08:00
events Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
explore Allow to set explore page default sort (#27951) 2023-11-09 10:11:45 +00:00
feed [GITEA] Add repo empty check for branch feed 2023-12-04 14:22:21 +01:00
healthcheck Remove db.DefaultContext in routers/ and cmd/ (#26076) 2023-07-23 23:47:27 -04:00
misc [API] Forgejo API /api/forgejo/v1 2023-12-04 12:47:01 +01:00
org Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
repo [GITEA] fix POST /{username}/{reponame}/{type:issues|pulls}/move_pin 2023-12-04 14:22:21 +01:00
shared Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
user [SECURITY] Rework long-term authentication 2023-12-04 12:47:02 +01:00
base.go Fix panic in storageHandler (#27446) 2023-10-06 13:23:14 +00:00
githttp.go Fix http protocol auth (#27875) 2023-11-02 22:14:33 +08:00
goget.go Support SSH for go get (#24664) 2023-05-12 09:44:37 +00:00
home.go Enhanced auth token / remember me (#27606) 2023-10-14 00:56:41 +00:00
metrics.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
nodeinfo.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
swagger_json.go Start using template context function (#26254) 2023-08-08 01:22:47 +00:00
web.go [GITEA] Accept shorter commit IDs in web route 2023-12-04 14:22:21 +01:00
webfinger.go Add a link to OpenID Issuer URL in WebFinger response (#26000) 2023-07-20 16:02:45 +08:00