Fix vulnerability reported in #4006

pull/3996/head
Unknwon 2017-01-03 10:36:27 +08:00
parent c4086d43db
commit 8aa35577b3
No known key found for this signature in database
GPG Key ID: 7A02C406FAC875A2
4 changed files with 4 additions and 4 deletions

View File

@ -3,7 +3,7 @@ Gogs - Go Git Service [![Build Status](https://travis-ci.org/gogits/gogs.svg?bra
![](https://github.com/gogits/gogs/blob/master/public/img/gogs-large-resize.png?raw=true) ![](https://github.com/gogits/gogs/blob/master/public/img/gogs-large-resize.png?raw=true)
##### Current tip version: 0.9.114 (see [Releases](https://github.com/gogits/gogs/releases) for binary versions ~~or submit a task on [alpha stage automated binary building system](https://build.gogs.io/)~~) ##### Current tip version: 0.9.115 (see [Releases](https://github.com/gogits/gogs/releases) for binary versions ~~or submit a task on [alpha stage automated binary building system](https://build.gogs.io/)~~)
| Web | UI | Preview | | Web | UI | Preview |
|:-------------:|:-------:|:-------:| |:-------------:|:-------:|:-------:|

View File

@ -17,7 +17,7 @@ import (
"github.com/gogits/gogs/modules/setting" "github.com/gogits/gogs/modules/setting"
) )
const APP_VER = "0.9.114.1227" const APP_VER = "0.9.115.0103"
func init() { func init() {
runtime.GOMAXPROCS(runtime.NumCPU()) runtime.GOMAXPROCS(runtime.NumCPU())

View File

@ -49,7 +49,7 @@ func getForkRepository(ctx *context.Context) *models.Repository {
return nil return nil
} }
if !forkRepo.CanBeForked() { if !forkRepo.CanBeForked() || !ctx.Repo.HasAccess() {
ctx.Handle(404, "getForkRepository", nil) ctx.Handle(404, "getForkRepository", nil)
return nil return nil
} }

View File

@ -1 +1 @@
0.9.114.1227 0.9.115.0103