forgejo/routers
Gergely Nagy 145dea59bb
fix: sanitize OriginalURL before displaying it
While `repo.OriginalURL` is supposed to be sanitized, with username and
passwords removed, it appears that is not always the case, and sometimes
we may encounter original URLs that aren't sanitized. While that is
possibly a historical artifact, we should still treat it with care.

As such, before displaying `repo.OriginalURL` as an info flash when
syncing a pull repository, sanitize the URL first, to be on the safe
side.

Signed-off-by: Gergely Nagy <forgejo@gergo.csillger.hu>
2025-08-30 08:07:17 +02:00
..
api feat: github compatability for removing label from issue API (#8831) 2025-08-30 03:29:23 +02:00
common feat: add tracing logs after process is complete (#8680) 2025-07-26 05:44:58 +02:00
install chore: use sharp to generate images (#7512) 2025-04-11 15:12:50 +00:00
private feat: Global 2FA enforcement (#8753) 2025-08-15 10:56:45 +02:00
utils [PORT] drop utils.IsExternalURL (and expand IsRiskyRedirectURL tests) (#3167) 2024-04-15 13:03:08 +00:00
web fix: sanitize OriginalURL before displaying it 2025-08-30 08:07:17 +02:00
init.go Add ActivityPub Person follow from distant (#8720) 2025-08-03 11:55:01 +02:00