d62ab49978
#3057 retrieve webhook with repo_id
...
This prevents user retrieve arbitrary webhook by changing URL to
access webhook from other unauthorized repositories.
8 years ago
e30c701386
#3229 disallow repository name . and ..
...
Since . and .. has browser automatical behaviors, we need to disallow those names.
9 years ago
401bf944ef
Use SecurityProtocol to replace UseSSL in LDAP config
...
Initially proposed by #2376 and fixes #3068 as well.
9 years ago
4b25bdfbc4
#3058 #3059 support correct page size and link header
9 years ago
528682a294
getEngine() not handles DB parameters ( #2972 ) ( #2974 )
9 years ago
3a30c06345
Fix wiki vulnerabilities
...
- Arbitrary file creation leading to command execution
- .md file creation/deletion
Reported by Gabriel Campana.
9 years ago
743d22669a
Re-work MAX_DIFF_LINES: supress diff per file, not the whole diff ( #3174 )
9 years ago
6efb1e5626
Localize collaboration settings. ( #3100 )
...
Closes #2764
9 years ago
8a248696e9
Use a gopher as default avatar (rather than the gravatar logo) ( #3208 )
...
Also changes the avatar from a jpeg to a png, to allow for
transparent background. The indexed png is also smaller in size.
Note that at the moment the default avatar is only used when
the user requested a custom avatar and the custom avatar file
is not found (should never happen).
In the future the default avatar could be used as a default
return when by-mail avatar lookups fail too (both gravatar
and libravatar support passing a default)
9 years ago
8b35c194ec
Fixes #3110 ( #3136 )
9 years ago
ac05f88641
Fix #3154 ( #3155 )
9 years ago
17a4d8a5e5
Fix capitalisation of repo-name in news ( #3203 )
...
use 'official' repo.Name instead of incoming repoName; to enforce
correct capitalisation
9 years ago
bc00da1721
Fix negative issue count ( #3207 )
9 years ago
e9ae926e04
#809 fix wrong closed issue count when create closed issue via API
...
Add start count corrector for Repository.NumClosedIssues
9 years ago
12d30255a7
Add comment note ( #3093 )
9 years ago
3c0c7a9f83
Fix listing team members ( #3048 )
9 years ago
d8612f7704
Fix remove folder issues, including initialization failling. ( #2969 )
...
- Prevent panic on creating notice if database is not available
- Prevent incorrect folder on Windows ("/" instead of "\")
9 years ago
0a78d99a4d
models/release: filter input to prevent command line argument vulnerability
9 years ago
0325bec283
#2895 minor fix for bug of xorm
9 years ago
dfad51fe9e
Made the issue stats query more secure with parameterized placeholders ( #2895 )
9 years ago
78b8b63774
#2992 set default style name when empty in AfterSet
9 years ago
ba314a7a36
Support alphanumeric issue style (ABC-1234) for external issue tracker ( #2992 )
9 years ago
762ab056a2
Fix XORM IN condition table name parse
9 years ago
746c7fd4e7
Followup fix for previous query fix
9 years ago
b5948f2e71
Made the issues query more secure and simpler
9 years ago
79a1bfd963
Try to make the SQL queries cleaner and more secure
9 years ago
b1d41cfa60
#1692 add admin APIs to add/remove a user from teams
9 years ago
98b58fa050
Handle windows deletion when start
...
Fix #2872
9 years ago
e6f927f61a
#1692 api: admin list and create team under organization
9 years ago
ff731ea07d
#2814 LOWER() column value within search
9 years ago
6ccb2d36cf
Remove email from user search
9 years ago
3253e3c5aa
Make user search look in username, name and email
...
Make user search function look in username (lower_name), full name
(full_name) and primary email (email). This will benefit searching after
user in "explore", admin panel and when adding new collaborators.
9 years ago
9bd9ad4205
#1692 add CRUD issue APIs
...
- Fix go-gogs-client#10
- Related to #809
9 years ago
f76d821bda
fix #2804
9 years ago
263304b6b7
#13 fix postgres aggregate
9 years ago
2bf8494332
#13 finish user and repository search
...
Both are possible on explore and admin panel
9 years ago
1314ba219e
Updated and created were appended with _unix. Fresh databases have only the newly named fields.
9 years ago
5267dce210
Fix ref comment from commit create empty feed
9 years ago
eed9966ad6
#2727 fix incompatible SQL in PostgreSQL
9 years ago
ad513a20e9
#2302 Replace time.Time with Unix Timestamp (int64)
9 years ago
13bd16af92
Minor fixes for #2766
9 years ago
9c91e27933
Added: Ability to delete org avatar.
9 years ago
a5b0400be7
#1146 finish new access rights for collaborators
9 years ago
045f14fbd0
#1146 finsih UI work for access mode of collaborators
...
Collaborators have write access as default, and can be changed via repository
collaboration settings page to change between read, write and admin.
9 years ago
414eb22ef9
#1597 fix activitity feeds for pull requests
9 years ago
a2f13eae55
#1157 some avatar setting changes
...
- Allow to delete current avatar
9 years ago
2a931937a8
Update locales
9 years ago
275464e7fb
Use relative url when showing forked from
9 years ago
e2d370f0da
#1597 fix pull request remote head can't update with force push
9 years ago
5335e671be
#2743 more fixes on SQL errors
9 years ago
Unknwon
Tom
Andrey Nering
Sandro Santilli
Franz Schmidt
Robin Lambertz
SjonHortensius
Kim Carlbäcker
Thomas Boerger
Cosmin Stroe
Odin Ugedal
Marin Jankovski
Tamás Molnár
Josh Frye