0
0
mirror of https://github.com/go-gitea/gitea.git synced 2024-11-21 19:19:04 +01:00
gitea/templates
Kemal Zebari 7adc4717ec
Include file extension checks in attachment API (#32151)
From testing, I found that issue posters and users with repository write
access are able to edit attachment names in a way that circumvents the
instance-level file extension restrictions using the edit attachment
APIs. This snapshot adds checks for these endpoints.
2024-11-06 21:34:32 +00:00
..
admin Refactor DateUtils and merge TimeSince (#32409) 2024-11-04 11:30:00 +00:00
api/packages/pypi Fix links in PyPI Simple Repository API page (#30594) 2024-04-20 01:15:14 +00:00
base Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
custom
devtest Refactor DateUtils and merge TimeSince (#32409) 2024-11-04 11:30:00 +00:00
explore Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
mail Remove unnecessary SanitizeHTML from code (#29575) 2024-03-04 12:02:45 +00:00
org Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
package Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
projects Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
repo Fix milestone deadline and date related problems (#32339) 2024-11-05 07:46:40 +00:00
shared Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
status Remove urls from translations (#31950) 2024-09-02 18:36:24 +00:00
swagger Include file extension checks in attachment API (#32151) 2024-11-06 21:34:32 +00:00
user Refactor template ctx and render utils (#32422) 2024-11-05 14:04:26 +08:00
webhook Fix incorrect tailwind migration (#30007) 2024-03-22 20:51:29 +01:00
home.tmpl Remove urls from translations (#31950) 2024-09-02 18:36:24 +00:00
install.tmpl Use forum.gitea.com instead of old URL (#31989) 2024-09-06 07:20:30 +00:00
post-install.tmpl Always use ctx.Locale.Tr inside templates (#27231) 2023-09-25 08:56:50 +00:00