forgejo/routers/web
Gusted b1b635c1d9
fix(sec): permission check for project issue
- Do an access check when loading issues for a project column, currently
this is not done and exposes the title, labels and existence of a
private issue that the viewer of the project board may not have access
to.
- The number of issues cannot be calculated in a efficient manner
and stored in the database because their number may vary depending on
the visibility of the repositories participating in the project. The
previous implementation used the pre-calculated numbers stored in each
project, which did not reflect that potential variation.
- The code is derived from https://github.com/go-gitea/gitea/pull/22865
2025-02-08 07:22:10 +00:00
..
admin chore: load 2fa status for user search when needed (#6727) 2025-01-29 17:57:55 +00:00
auth chore: remove deadcode in models/user 2025-01-29 18:37:14 +01:00
devtest Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
events Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
explore fix: set explore pages to configurable default sort (#6708) 2025-01-31 10:38:03 +00:00
feed Add pubdate for repository rss and add some tests (#33411) 2025-02-02 12:01:29 +01:00
healthcheck Add health-check test 2024-04-06 00:34:55 +02:00
misc fix: Preview picture not visible on Markdown file (#5781) 2024-11-23 15:00:18 +00:00
org fix(sec): permission check for project issue 2025-02-08 07:22:10 +00:00
repo fix(sec): permission check for project issue 2025-02-08 07:22:10 +00:00
shared Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
user chore: remove usages of sort.Sort (#6689) 2025-01-26 13:30:00 +00:00
base.go Fix missing signature key error when pulling Docker images with SERVE_DIRECT enabled (#32365) 2024-11-05 09:33:15 +01:00
githttp.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
goget.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
home.go Rewrite OpenGraph Header 2025-01-01 20:43:20 +01:00
metrics.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
nodeinfo.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
swagger_json.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
web.go Update 2024-12-18 22:33:22 +01:00
webfinger.go Enable more revive linter rules (#30608) 2024-04-28 15:39:00 +02:00