5451 Commits

Author SHA1 Message Date
Joe Chen
7f8799c01f
release: update version to 0.12.8 v0.12.8 v0.12.8-rc.1 2022-05-31 16:47:45 +08:00
Joe Chen
4c6cac637f
task generate 2022-05-31 16:41:40 +08:00
Toby Simmons
6a6cdb209b
csrf: sanitize token after reading from cookie (#6969)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-31 16:39:05 +08:00
1135
2d58fd163f
repo_editor: prohibits uploading files to .git. directory (#6970)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-31 16:38:43 +08:00
Joe Chen
5250403d60
repo_editor: prohibit move files to to .git directory (#6986)
# Conflicts:
#	CHANGELOG.md
2022-05-31 16:38:36 +08:00
Joe Chen
bcebe673d1
webhook: revalidate local hostname before each delivery (#6988)
# Conflicts:
#	CHANGELOG.md
2022-05-31 16:38:07 +08:00
Joe Chen
93f65dd95d
locale: sync from Crowdin (#6989)
# Conflicts:
#	conf/locale/locale_de-DE.ini
#	conf/locale/locale_en-GB.ini
#	conf/locale/locale_fi-FI.ini
#	conf/locale/locale_fr-FR.ini
#	conf/locale/locale_hu-HU.ini
#	conf/locale/locale_it-IT.ini
#	conf/locale/locale_ja-JP.ini
#	conf/locale/locale_mn-MN.ini
#	conf/locale/locale_pl-PL.ini
#	conf/locale/locale_pt-BR.ini
#	conf/locale/locale_ru-RU.ini
#	conf/locale/locale_tr-TR.ini
#	conf/locale/locale_uk-UA.ini
#	conf/locale/locale_vi-VN.ini
#	conf/locale/locale_zh-TW.ini
2022-05-31 16:37:23 +08:00
Joe Chen
8b395a49b3
chore: fix lint errors (#6951) 2022-05-16 20:59:09 +08:00
Joe Chen
d06ba7e527
ci: mirror lint config from main v0.12.7-rc.1 v0.12.7 2022-05-05 16:18:01 +08:00
Joe Chen
b0a902dcca
release: update version to 0.12.7 2022-05-05 16:10:55 +08:00
Joe Chen
bc77440b30
attachment: set CSP header in the serving endpoint (#6926) 2022-05-05 16:01:44 +08:00
Joe Chen
2a8f561c64
mod: update golang.org/x/crypto/ssh (#6884)
# Conflicts:
#	go.mod
#	go.sum
2022-04-06 21:34:26 +08:00
E99p1ant
8a046c22a8
context: fix Access-Control-Allow-Credentials header typo (#6381) 2022-04-06 21:30:38 +08:00
Joe Chen
26395294bd
go mod tidy v0.12.6-rc.1 v0.12.6 2022-03-19 14:39:55 +08:00
Joe Chen
c91365774b
Fix tests 2022-03-19 14:34:43 +08:00
Joe Chen
dff067ac28
ci: add go 1.18.x 2022-03-19 14:29:05 +08:00
Joe Chen
45fdfecf64
Disable flaky generated files check 2022-03-19 14:28:24 +08:00
Joe Chen
1bf5d89386
run task generate 2022-03-19 14:08:46 +08:00
Joe Chen
670cbccf98
release: update version to 0.12.3 2022-03-19 14:07:09 +08:00
Joe Chen
4e10265568
chore: run task generate (#6844)
# Conflicts:
#	.github/workflows/go.yml
#	internal/assets/templates/templates_gen.go
2022-03-15 22:44:47 +08:00
tc608
640e2f62e0
templates: fetch fixed size of members' avatar (#5755)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-15 22:43:11 +08:00
Joe Chen
eddae31ada
conf: add allowlist for accessing local network (#6842)
# Conflicts:
#	CHANGELOG.md
#	internal/assets/conf/conf_gen.go
#	internal/assets/templates/templates_gen.go
#	internal/conf/static.go
#	internal/conf/testdata/TestInit.golden.ini
2022-03-14 23:54:23 +08:00
Joe Chen
0fef3c9082
repo_editor: check upload TreePath and file name (#6838) 2022-03-14 00:37:34 +08:00
Bo Lorentsen
5aca56d2dd
docker: check "/data" mount ownership before forcing it (#6553)
Co-authored-by: bl <bl@moch.dk>
2022-03-13 21:44:43 +08:00
Joe Chen
e309bc8324
release: update version to 0.12.5 v0.12.5-rc.1 v0.12.5 2022-03-11 14:58:57 +08:00
ysf
64102be2c9
security: fix improper PAM authorization handling (#6819)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/auth/pam/pam.go
2022-03-11 14:52:11 +08:00
Michael Rowley
91f2cde5e9
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/route/repo/webhook.go
2022-03-11 14:51:32 +08:00
Joe Chen
b3541030c3
Update Taskfile for Windows 2022-01-18 00:23:27 +08:00
Joe Chen
bc8b8c3767
Add Taskfile 2022-01-17 21:38:13 +08:00
Joe Chen
d4ae178b72
Fix docker scripts permissions v0.12.4-rc.1 v0.12.4 2022-01-17 10:19:45 +08:00
Joe Chen
fa1d9174ad
ci: add docker workflow 2022-01-17 09:45:19 +08:00
Joe Chen
2210ab7a42
release: update version to 0.12.4 2022-01-17 09:25:29 +08:00
Joe Chen
01a2c68abb
ci: sync workflows from main branch (#6730) 2022-01-16 19:51:14 +08:00
Joe Chen
2626bcf94f
chore: sync up Dockerfile and Makefile 2022-01-13 14:19:58 +08:00
Joe Chen
5a04c47cf0
markup: use default link formation when no format in metas (#6723)
# Conflicts:
#	CHANGELOG.md
2022-01-13 10:19:59 +08:00
stypr
ec84506da4
repo: disallow urlencoded new lines in git protocol paths (#6420)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-27 18:53:38 +08:00
Matheus Mosca
eb3386c4aa
context: add X-Frame-Options header (#6411)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
# Conflicts:
#	CHANGELOG.md
2020-11-11 12:20:58 +08:00
ᴜɴᴋɴᴡᴏɴ
f0e3cd90f8
release: update version to 0.12.3 v0.12.3 2020-10-07 22:39:36 +08:00
ᴜɴᴋɴᴡᴏɴ
fbe34c8c61
lfs: ask client to always send the same value for the HTTP header (#6369)
# Conflicts:
#	go.sum
2020-10-06 13:12:56 +08:00
Jeff
e6b4c467e8
markup: render SHA links without branch prefix (#6350)
Co-authored-by: Zhukov Roman <zhukov.roman@gmail.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-10-06 13:08:27 +08:00
ᴜɴᴋɴᴡᴏɴ
6b6bfe8bb0
cmd/serv: use different log files for ORMs in hook mode (#6361)
# Conflicts:
#	CHANGELOG.md
#	go.sum
#	internal/db/db.go
#	internal/db/models.go
2020-09-29 22:36:02 +08:00
ᴜɴᴋɴᴡᴏɴ
253b2bef4c
ci: update Go workflow from main v0.12.2 2020-09-26 16:53:26 +08:00
ᴜɴᴋɴᴡᴏɴ
1a051ae5f8
release: update version to 0.12.2 2020-09-26 16:50:07 +08:00
ᴜɴᴋɴᴡᴏɴ
ca54cbd055
action: fix issue reference regexp and error handling (#6352) 2020-09-26 16:23:40 +08:00
ᴜɴᴋɴᴡᴏɴ
9044afa40f
dep: update github.com/unknwon/cae to v1.0.2 (#6342)
# Conflicts:
#	go.mod
#	go.sum
2020-09-21 20:32:05 +08:00
ᴜɴᴋɴᴡᴏɴ
672625b55c
gitutil: infer submodule with baseURL when it is a relative path (#6337)
# Conflicts:
#	internal/assets/templates/templates_gen.go
#	internal/conf/testdata/TestInit.golden.ini
2020-09-18 16:21:16 +08:00
ᴜɴᴋɴᴡᴏɴ
98c65f319f
web: correctly serving go-get pages for subdirs (#6318)
* web: correctly serving go-get page for subdirs

* Update CHANGELOG

* Fix golint error
# Conflicts:
#	CHANGELOG.md
2020-09-09 20:15:44 +08:00
ᴜɴᴋɴᴡᴏɴ
43fc826085
release: update version to 0.12.1 v0.12.1 2020-08-27 14:47:41 +08:00
ᴜɴᴋɴᴡᴏɴ
d7a6bb8bcb
db: fix wrong column type of login_source (#6283)
# Conflicts:
#	CHANGELOG.md
2020-08-27 14:46:26 +08:00
Kosadchiy
db037495de
issue: fix timestamp updating (#6210)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-08-27 14:46:06 +08:00