aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* pkg/tool: improve SanitizePath (#5558)Unknwon2018-12-18
|
* models/repo_editor: sanitize user-defined file name to prevent RCE (#5558)Unknwon2018-12-18
| | | | Reported by PentesterLab (https://pentesterlab.com).
* models/action: skip issue index parsing while using external issue tracker ↵Unknwon2018-12-17
| | | | (#5551)
* vendor: updateUnknwon2018-12-16
| | | | | - github.com/gogs/go-gogs-client - gopkg.in/macaron.v1
* api: add GetReferenceSHA (#5546)Unknwon2018-12-16
|
* vendor: update github.com/gogs/go-gogs-clientUnknwon2018-12-15
|
* api: add GetSingleCommit (#5546)Unknwon2018-12-15
|
* vendor: update github.com/gogs/git-moduleUnknwon2018-12-15
|
* .github: adjust issue templatesUnknwon2018-12-14
| | | | [skip ci]
* locale: sync from CrowdinUnknwon2018-12-11
|
* models: remove legacy supportUnknwon2018-12-11
|
* pkg/markup: support data URL of base64 encoded images (#5391)Nikita2018-12-10
|
* templates: rename template function Str2html -> Str2HTMLUnknwon2018-12-10
|
* templates: sanitize special links in commit message (#5545)Unknwon2018-12-10
| | | | Reported by @cezar97.
* templates: make state changing routes to POST method (#5541)Unknwon2018-12-06
| | | | - pkg/context: add ParamsUser to unify the injection process
* vendor: update github.com/go-macaron/sessionUnknwon2018-12-04
|
* user/auth: flush and destroy session at logout (#5540)Unknwon2018-12-04
| | | | Reported by @cezar97.
* ci: update appveyor.ymlUnknwon2018-12-03
|
* vendor: update github.com/gogs/go-gogs-clientUnknwon2018-12-03
| | | | Bring fixes for #5538
* pkg/context: use host address and apply insecure flag for go-get=1 when ↵Unknwon2018-12-03
| | | | needed (#5305)
* pkg/context: expose port in import path for 'go-get=1' (#5305)Unknwon2018-12-03
|
* locale: sync from CrowdinUnknwon2018-12-02
|
* public/css: adjust width of label color in dropdownUnknwon2018-12-02
| | | | models/issue: unify Issue receiver name to 'issue'
* models/issue: fix panic when clear labels (#5445)Unknwon2018-12-02
|
* github: update issue templates (#5537)无闻2018-12-02
|
* vendor: update github.com/gogs/go-gogs-clientUnknwon2018-12-02
|
* api/repo: support edit repository issue tracker (gogs/go-gogs-client#94)Unknwon2018-12-02
|
* routes/api: change status handle to new styleUnknwon2018-12-01
| | | | Also fixed one bug that did not catch team not found error.
* routes/api: allow get repository without login (#5475)Unknwon2018-12-01
|
* templates/user/dashboard: include 'org' query parameter in new mirror URL ↵Samuel Cochran2018-11-29
| | | | (#5534)
* api: fix critical CSRF vulnerabilities on API routes (#5355)Unknwon2018-11-28
| | | | By explicitly requires token authentication.
* README: add new sponsorUnknwon2018-11-27
|
* templates/wiki: fix emoji rendering (#4869)Unknwon2018-11-26
|
* conf: fix unexpected behavior of config inheritance (#5007)Unknwon2018-11-26
|
* routes/repo/issue: implement issue pre-filling (#5521)Charles Kenney2018-11-20
| | | Signed-off-by: Charles Kenney <charlesc.kenney@gmail.com>
* conf: add go-bindata install command in READMEUnknwon2018-11-20
| | | | [ci skip]
* locale: sync from CrowdinUnknwon2018-11-19
|
* mirror: trigger additional push webhook on new branch (#5508)Danilo Riecken P. de Morais2018-11-14
| | | | This commit fixes issue #5473 and makes a new branch behave like a push event and trigger the appropriate webhook.
* templates/user/profile: added rel="me" to website link on user profile (#5485)Federico Culloca2018-11-12
| | | | | | | | * Added rel="me" to website link on user profile See issue #5008 * Added `nofollow` as per feedback
* ci: remove Go master for the momentUnknwon2018-11-08
|
* public/css: add 'overflow-wrap: break-word' to dashboard news feeds (#5507)A.J. Ruckman2018-11-08
|
* repo/http: update CORS headers to allow custom user-agent (#5498)William Hilton2018-11-07
| | | At some point after #4970 was merged, isomorphic-git started sending a custom User-Agent in its HTTP requests to deal with some services (\*cough\* gists \*cough\*) which filtered git traffic by User-Agent. Sadly, this broke cloning from Gogs using isomorphic-git in the browser (https://github.com/isomorphic-git/isomorphic-git/issues/555). This PR fixes it by telling browsers it is OK for CORS requests to send a custom User-Agent header.
* vendor: update github.com/go-macaron/session (#5469)Unknwon2018-11-06
| | | | Fix security flaw reported by c957861129d62331c5704d2f04d11e41.
* Merge branch 'master' of github.com:gogs/gogs into developUnknwon2018-11-05
|\
| * ldap: grammar fix (#5493)hopegolden2018-11-05
| |
| * docker: grammar fix (#5492)hopegolden2018-11-05
| |
* | Dockerfile.aarch64hub: install shadow package (#5481)Masen Furer2018-11-05
| | | | | | | | the shadow package contains the usermod(8) utility which is used by start.sh and finalize.sh to configure the git user
* | pkg/bindata: update contentUnknwon2018-11-04
| |
* | conf: change default session cookie nameUnknwon2018-10-24
| | | | | | | | [CI SKIP]
* | vendor: update github.com/go-macaron/session (#5469)Unknwon2018-10-24
| | | | | | | | Fix security flaw reported by c957861129d62331c5704d2f04d11e41.