aboutsummaryrefslogtreecommitdiff
path: root/routers/api/v1/repo/hook.go
diff options
context:
space:
mode:
authorUnknwon <u@gogs.io>2016-07-08 13:57:09 +0800
committerUnknwon <u@gogs.io>2016-07-08 13:57:09 +0800
commitd62ab499784386935fa20152c1c163d0ef62d31a (patch)
treee6104d8b2768da112b2f0051a24efc1c12ae531a /routers/api/v1/repo/hook.go
parente30c7013862a9d2c2ae60e403a1624e54475c4c7 (diff)
#3057 retrieve webhook with repo_id
This prevents user retrieve arbitrary webhook by changing URL to access webhook from other unauthorized repositories.
Diffstat (limited to 'routers/api/v1/repo/hook.go')
1 files changed, 1 insertions, 1 deletions
diff --git a/routers/api/v1/repo/hook.go b/routers/api/v1/repo/hook.go
index 0cbe6762..0dac8f7c 100644
--- a/routers/api/v1/repo/hook.go
+++ b/routers/api/v1/repo/hook.go
@@ -98,7 +98,7 @@ func CreateHook(ctx *context.APIContext, form api.CreateHookOption) {
// https://github.com/gogits/go-gogs-client/wiki/Repositories#edit-a-hook
func EditHook(ctx *context.APIContext, form api.EditHookOption) {
- w, err := models.GetWebhookByID(ctx.ParamsInt64(":id"))
+ w, err := models.GetWebhookByID(ctx.Repo.Repository.ID, ctx.ParamsInt64(":id"))
if err != nil {
if models.IsErrWebhookNotExist(err) {
ctx.Status(404)
Powered by cgit, Themed by Ted Yin.