Commits at 4d0a72a2710fd3381574485980f056ac644a10d7
4d0a72a2Revert "Prevent possible XSS when using jQuery (#18289)" (#18293)
This reverts commit 661d3d28e97bb49bef075c0314edad5879148aaa.wxiaoguang
authored at
GitHub
comitted at
72b36816not show double error response in git hook (#18292)
if return a error message to cli, it will print it
to stderr which is duplicate with our code (line 82
in same file). so user will see two line same
error message in git output. I think it's not mecessary,
so suggerst not return error message to cli. Thanks.
Signed-off-by: a1012112796 <1012112796@qq.com>a1012112796
authored at
GitHub
comitted at
7960c96cRemove accidental debugging in blob_excerpt.tmpl (#18287)
* Remove accidental debugging in blob_excerpt.tmpl
Unfortunately it appears that a small bit of debugging code was left in blob_excerpt.tmpl
This breaks diff expansion causing #18281.
Fix #18281
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>zeripath
authored at
GitHub
comitted at
661d3d28Prevent possible XSS when using jQuery (#18289)
In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.Gusted
authored at
GitHub
comitted at
4b4884ceReturn nicer error if trying to pull from non-existent user (#18288)
* Return nicer error if trying to pull from non-existent user
Gitea serv will currently return an 500 if we try to pull from a repository where
the owner does not exist.
This PR checks for the UserNotExist Error when checking for the user and will
return a NotFound error instead.
Fix #18225zeripath
authored at
GitHub
comitted at
a38ab71bdocs: mention client_max_body_size affects LFS (#18291)
Jan Tojnar
authored at
GitHub
comitted at
0ed9b006Add lockfile-check (#18285)
* Add lockfile-check
This check runs `npm install` which will rewrite the lockfile in case it
is inconsistent with package.json. This check detects this and will fail
the CI in such a case.silverwind
authored at
GitHub
comitted at
d7c2a295Webauthn nits (#18284)
This contains some additional fixes and small nits related to #17957
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>zeripath
authored at
GitHub
comitted at
e239d354Update `package-lock.json` (#18283)
- NPM didn't like that package-lock.json was out-of-sync, webpack
throwed some errors as well with building.
- Follow-up for: #18278Gusted
authored at
GitHub
comitted at
84145e45Remove golang vendored directory (#18277)
* rm go vendor
* fix drone yaml
* add to gitignoretechknowlogick
authored at
GitHub
comitted at
2b16ca7cChangelog for 1.15.10 (#18274) (#18276)
* Changelog for 1.15.10 (#18274)
[1.15.10](https://github.com/go-gitea/gitea/releases/tag/v1.15.10) - 2022-01-14
* BUGFIXES
* Fix inconsistent PR comment counts (#18260) (#18261)
* Fix release link broken (#18252) (#18253)
* Fix update user from site administration page bug (#18250) (#18251)
* Set HeadCommit when creating tags (#18116) (#18173)
* Use correct translation key for error messages due to max repo limits (#18135 & #18153) (#18152)
* Fix purple color in suggested label colors (#18241) (#18242)
* SECURITY
* Bump mermaid from 8.10.1 to 8.13.8 (#18198) (#18206)
* update docs/config.yaml
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: Richard Mahn <richmahn@users.noreply.github.com>zeripath
authored at
GitHub
comitted at
35c35538Support webauthn (#17957)
Migrate from U2F to Webauthn
Co-authored-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>Lunny Xiao
authored at
GitHub
comitted at
d413a1f8Improve the comment for 2FA filter in admin panel (#18017)
Replace TODO with explanation
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>Gusted
authored at
GitHub
comitted at
696521b3fix regression from #16075 (#18260)
we don't want reviews to count towards comments, as this needs changes
in other components as well (eg repo stats cron job, etc).
Co-authored-by: 6543 <6543@obermui.de>Norwin
authored at
GitHub
comitted at
f635d603Prevent underline hover on cards (#18259)
Prevent a undesired underline effect on hovered cards.
This was regressed by #17898.silverwind
authored at
GitHub
comitted at
dd135c62Fix release link broken (#18252)
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>Lunny Xiao
authored at
GitHub
comitted at
69a28299migrations: a deadline at January 1st, 1970 is valid (#18237)
* migrations: a deadline at January 1st, 1970 is valid
Do not change the deadline value if it is set to January 1st, 1970.
Setting the deadline to year 9999 when it is zero (which is equal to
January 1st, 1970) modifies a deadline set to January 1st, 1970 which
is a valid date. In addition, setting a date in year 9999 will be
converted to a null date in some cases.
Signed-off-by: Loïc Dachary <loic@dachary.org>
* tests: set milestone.deadline_unix in fixtures
The value of deadline_unix must be set to 253370764800 (i.e. 9999-01-01) in
fixtures, otherwise it will be inserted as null which leads to
unexpected errors. For instance, DumpRepository will store a null
deadline_unix as 0 (i.e. 1970-01-01) and RestoreRepository will change
it to 9999-01-01.
Signed-off-by: Loïc Dachary <loic@dachary.org>
Co-authored-by: Loïc Dachary <loic@dachary.org>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>Aravinth Manivannan
authored at
GitHub
comitted at
eaf09a53Fix documents for development and bug report (#18249)
wxiaoguang
authored at
GitHub
comitted at
17b2079fAdd/update SMTP auth providers via cli (#18197)
Allow adding/updating SMTP authentication source via CLI using:
- gitea admin auth add-smtp
- gitea admin auth update-smtp
Signed-off-by: Zoran Peričić <zpericic@netst.org>
Zoran Peričić
authored at
GitHub
comitted at
ff00b868Fix NPE on try to get tag reference via API (#18245)
* fix npe
* rm gitRepo from Tag6543
authored at
GitHub
comitted at
72cced1fFix purple color in suggested label colors (#18241)
This looks like a typo that was introduced when these colors were added,
causing what is supposed to be purple show up as green.silverwind
authored at
GitHub
comitted at
09d2029bPrevent NPE when viewing non-rendered files (#18234)
Fix #18231
Signed-off-by: Andrew Thornton <art27@cantab.net>zeripath
authored at
GitHub
comitted at