Commit Graph

146 Commits (9ebd62f6765eb86e74f8c087c67d137c2e74ab35)

Author SHA1 Message Date
Andy Hochhaus 9ebd62f676 pkg/mailer/mail: render markdown in issue related emails (#5629)
Reference #4552
2019-02-20 17:54:27 -05:00
Unknwon 06b6eaba06
locale: sync from Crowdin
- Add Portuguese
2019-01-30 21:59:10 -05:00
Unknwon 713a7d518d
locale: sync from Crowdin 2019-01-21 15:19:27 -05:00
Guy Smoilov 5702e4bc24 pkg/mailer: support plaintext alt for HTML emails (#5568)
* Added option to use plain text alt to HTML emails. Should make the messages friendlier for spam filters.

* Check that plaintext conversion worked before adding the HTML alt

* Add description of ADD_PLAIN_TEXT_ALT to app.ini

* Added comment clarifying html AddAlternative
2018-12-25 10:08:00 -05:00
Unknwon 5f1f1bb5ed pkg/tool/path: use IsMaliciousPath to replace SanitizePath (#5558) 2018-12-25 09:47:33 -05:00
Unknwon 8c8c37a66b
pkg/tool/path: handle Windows path separators (#5558) 2018-12-19 22:56:36 -05:00
Unknwon e70e72e025 pkg/ssh: specify ssh-keygen to always generate PEM format 2018-12-19 08:31:22 -05:00
Unknwon 657ea2686f
auth: coding style and glitches fixes for GitHub login source (#5340) 2018-12-18 16:46:50 -05:00
haixunlu 311df9c521 auth: add new authentication source: GitHub, including GitHub Enterprise (#5340)
* Add new Authentication Source: GitHub, including GitHub Enterprise.

* Add vendor dependencies.
2018-12-18 15:49:30 -05:00
Unknwon ff93d9dbda
pkg/tool: improve SanitizePath (#5558) 2018-12-18 01:38:08 -05:00
Unknwon 86ada87529
models/repo_editor: sanitize user-defined file name to prevent RCE (#5558)
Reported by PentesterLab (https://pentesterlab.com).
2018-12-18 01:31:04 -05:00
Unknwon f91cb9321e
api: add GetReferenceSHA (#5546) 2018-12-16 19:47:32 -05:00
Unknwon ee82d35ed8
api: add GetSingleCommit (#5546) 2018-12-15 00:24:41 -05:00
Unknwon f43d21d0af
locale: sync from Crowdin 2018-12-11 22:17:09 -05:00
Nikita 9079fb6a0d pkg/markup: support data URL of base64 encoded images (#5391) 2018-12-10 23:53:08 -05:00
Unknwon db3f0048d8
templates: rename template function Str2html -> Str2HTML 2018-12-10 22:23:56 -05:00
Unknwon d3d8284985
templates: sanitize special links in commit message (#5545)
Reported by @cezar97.
2018-12-10 22:21:42 -05:00
Unknwon f545faa06d
templates: make state changing routes to POST method (#5541)
- pkg/context: add ParamsUser to unify the injection process
2018-12-06 22:58:02 -05:00
Unknwon 6690023555
pkg/context: use host address and apply insecure flag for go-get=1 when needed (#5305) 2018-12-03 13:36:11 -05:00
Unknwon a7e8187a0d
pkg/context: expose port in import path for 'go-get=1' (#5305) 2018-12-03 13:24:31 -05:00
Unknwon 0c1b72616a
locale: sync from Crowdin 2018-12-02 20:02:09 -05:00
Unknwon e1b3a25008
api/repo: support edit repository issue tracker (gogs/go-gogs-client#94) 2018-12-02 12:55:05 -05:00
Unknwon 69c1cd3f38
routes/api: change status handle to new style
Also fixed one bug that did not catch team not found error.
2018-12-01 21:41:30 -05:00
Unknwon 3db9b06a6e
api: fix critical CSRF vulnerabilities on API routes (#5355)
By explicitly requires token authentication.
2018-11-28 21:05:58 -05:00
Unknwon a91d9054ad
conf: fix unexpected behavior of config inheritance (#5007) 2018-11-26 06:44:06 -05:00
Unknwon 1d19a58424 locale: sync from Crowdin 2018-11-19 18:58:00 -05:00
Unknwon a4dd2b1916
Merge branch 'master' of github.com:gogs/gogs into develop 2018-11-05 16:48:31 -05:00
hopegolden 6a083e9561 ldap: grammar fix (#5493) 2018-11-05 16:44:28 -05:00
Unknwon f35d4164d6
pkg/bindata: update content 2018-11-04 18:37:01 -05:00
aboron 43bca4df40 ldap: fix group membership search handling when the group members are listed by 'dn' (#4684) (#4688)
Also, fixed typo in group member list return size check.
2018-10-23 04:16:39 -04:00
Unknwon 82269e4b8c
locale: sync from Crowdin 2018-10-16 16:58:18 -04:00
Unknwon a221b2807f
routes/repo/issue: fix redirect with unexpected escape (#5443) 2018-09-30 13:55:40 -04:00
Unknwon 0d66b1cc1c
pkg/context: apply EscapePound at context level
Always escape template variable {{.Link}} variable and  redirect calls.

Relates to #5442
2018-09-28 23:56:45 -04:00
Unknwon bd7d1e2f16
routes: fix open redirect vulnerability (#5355)
Reported by @cezar97.
2018-09-28 23:19:29 -04:00
Unknwon aff0bbcc32
pkg/ssh: print actual error in panic (#5435) 2018-09-28 15:37:34 -04:00
Unknwon 3a4c981e31
locale: sync from Crowdin 2018-09-16 11:53:32 -04:00
Unknwon 520530dfcf
metrics: add initial Prometheus support (#4141) 2018-09-14 22:29:43 -04:00
Unknwon 31c18b4bc7
repo: adjust pull request setting description (#5359) 2018-09-14 20:10:54 -04:00
Unknwon b68de2330d
auth: support set default login source (#5274) 2018-09-13 14:06:04 -04:00
haixunlu 68a6579852 login_source: add default authentication switch (#5338)
* Add default Authentication Switch.

* adjust the code accroding to reviews

* #1. Remove redudant logic.
#2, Fix a bug in "Edit" panel.

* Remove unused logic

* Fix local authentication files are not flushed.

* refactor according to review.
2018-09-13 13:49:07 -04:00
Unknwon f7b9f35ce1
locale: sync from Crowdin 2018-09-10 10:41:00 -04:00
Unknwon a05c19682e
locale: sync from Crowdin 2018-08-23 12:45:53 +08:00
Unknwon 512a900202
repo/editor: hide internal error detail
Prevent exposure of server path
2018-08-17 23:35:53 +08:00
Unknwon ac73d43444
repo_editor: able to trigger Git hooks (#4338) 2018-08-17 23:15:20 +08:00
Unknwon 844d69143f
pkg/markup: allow match SHA1 length 7-40 (#3321) 2018-08-17 20:02:43 +08:00
Unknwon 97fb9d283f
locale: sync from Crowdin 2018-07-16 06:14:54 +08:00
Unknwon f6bdefe3f3
public: minor fix for PR #5276 2018-06-26 21:16:29 +08:00
Unknwon 992ea5802a
locale: sync from Crowdin 2018-06-18 12:21:51 +08:00
Unknwon 376a629c9f
repo: add changes to repository avatar feature (#5221) 2018-06-17 22:18:41 +08:00
Sergey Dryabzhinsky 303fa37b60 repo: support avatars (#5221)
* First code for repository avatars

* Last code for repository avatars

- add new option for repo avatars location on filesystem
- add route catch in web
- add new fields to repo model
- add migration
- update settings handlers
- update repo header template

* Update locale messages

* Add repo avatars to home page

* Add repo avatars to organization right panel

* Show repo avatars in repo list

* Remove AvatarEamil field, remove Gravatar support, use generic locale messages

* Fix migration

* Fix seed and not used tool

* Revert public css changes, add them to less files

* Latest lessc (2.6.0) don't put result into file but output to stdout

So redirect output to file

* Simplify things:

- migration don't needed, and table changes too
- just upload file to repo avatar storage
- or generate random image

* Fix repo image seed - name not unique

* Get rid of not needed model fields

* Class value is enough, remove height attribute

* Don't generate random avatar for repository

- use html and semantic ui icons if no avatar found

* Update styles and templates for repo

- use repo icon as default avatar
- use globe icon for public repos
- add micro style for repo avatars at dashboard

* Remvoe redundant empty line

* Fix nl2br filter - must return string

* Fix css style for micro-repo-avatar in dashboard list

* Remove `|len`, works fine w/o it.

* Update after review 2:

- use static route for repository avatar
- format images settings block in settings

* Update after review 2:

- no random avatar for repo

* Update after review 2:

- no random avatar for repo 2
- update imports
- update UploadAvatar* functions

* Update after review 2:

- update templates

* Fix trace call

* Remove unused immport since we use static route for repo avatars.
2018-06-17 20:21:52 +08:00