Commit Graph

5472 Commits (c9fba3cb30af0789fcf89098dfcb8f2286ee7d3b)

Author SHA1 Message Date
Joe Chen c9fba3cb30
release: update version to 0.12.11 2023-02-25 13:39:54 +08:00
Joe Chen 0d4cb74077
Fix failing tests 2023-02-25 13:35:28 +08:00
Joe Chen 01917975f9
Fix compile error 2023-02-25 13:05:41 +08:00
Joe Chen b1576d5a1f
fix(db): correctly check Git path on case-insensitive file system (#7359) 2023-02-25 13:02:31 +08:00
Joe Chen ced66de44a
fix(db): sanitize user full name after find (#7353)
# Conflicts:
#	internal/db/issue.go
#	internal/db/users.go
#	internal/db/users_test.go
2023-02-25 13:00:55 +08:00
Joe Chen 5a3914cfca
fix(repo): be tolerant to implicit submodules (#7352)
# Conflicts:
#	CHANGELOG.md
#	go.mod
#	go.sum
2023-02-25 12:56:56 +08:00
Joe Chen 4795575fac
gofmt 2022-08-08 14:01:52 +08:00
Joe Chen e4f9251e54
ci: drop Go < 1.17 and add 1.19 2022-08-08 14:01:43 +08:00
Joe Chen 1ce5171ae1
Do not run tests with race detection on Windows 2022-08-02 11:01:04 +08:00
Joe Chen 47297c0510
gofmt 2022-08-02 10:44:36 +08:00
Joe Chen a2113bd13a
release: update version to 0.12.10 2022-08-02 10:42:47 +08:00
Joe Chen 7be49a8f2f
netutil: allow using `*` to match any hostname (#7111)
# Conflicts:
#	internal/netutil/netutil_test.go
2022-08-02 10:38:46 +08:00
Joe Chen 7f147eb573
webhook: validate against hostname instead of full URL (#7075)
# Conflicts:
#	CHANGELOG.md
2022-08-02 10:37:45 +08:00
Joe Chen 012a1ba19e
release: update version to 0.12.9 2022-06-07 21:29:32 +08:00
Joe Chen a24b22c909
http: clean request path from Git endpoints (#7022) 2022-06-07 21:26:15 +08:00
Joe Chen 20923a8829
pathutil: check both styles of `os.PathSeparator` (#7020) 2022-06-07 21:25:51 +08:00
E99p1ant 4c02b480dc
issues: sanitize `DisplayName` (#7009)
* issues: display issue poster’s `Name` instead of `DisplayName`

* sanitize display name

* update changelog
2022-06-07 21:24:56 +08:00
Joe Chen deeb3f73e4
repo_editor: check both styles of `os.PathSeparator` in all systems (#7005)
# Conflicts:
#	CHANGELOG.md
2022-06-07 21:24:37 +08:00
Joe Chen 1bc379f4d4
pull: ignore PR status check if head repository is missing (#7004)
# Conflicts:
#	internal/db/pull.go
2022-06-07 21:23:38 +08:00
Joe Chen 8e8b185ea1
http: fix non-sense `NotFound` call (#7003) 2022-06-07 21:21:29 +08:00
Joe Chen 42ad18a245
repo: remove hard-coded branch name in init (#6999) 2022-06-07 21:20:54 +08:00
Joe Chen 7f8799c01f
release: update version to 0.12.8 2022-05-31 16:47:45 +08:00
Joe Chen 4c6cac637f
task generate 2022-05-31 16:41:40 +08:00
Toby Simmons 6a6cdb209b
csrf: sanitize token after reading from cookie (#6969)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-31 16:39:05 +08:00
1135 2d58fd163f
repo_editor: prohibits uploading files to `.git.` directory (#6970)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-05-31 16:38:43 +08:00
Joe Chen 5250403d60
repo_editor: prohibit move files to to `.git` directory (#6986)
# Conflicts:
#	CHANGELOG.md
2022-05-31 16:38:36 +08:00
Joe Chen bcebe673d1
webhook: revalidate local hostname before each delivery (#6988)
# Conflicts:
#	CHANGELOG.md
2022-05-31 16:38:07 +08:00
Joe Chen 93f65dd95d
locale: sync from Crowdin (#6989)
# Conflicts:
#	conf/locale/locale_de-DE.ini
#	conf/locale/locale_en-GB.ini
#	conf/locale/locale_fi-FI.ini
#	conf/locale/locale_fr-FR.ini
#	conf/locale/locale_hu-HU.ini
#	conf/locale/locale_it-IT.ini
#	conf/locale/locale_ja-JP.ini
#	conf/locale/locale_mn-MN.ini
#	conf/locale/locale_pl-PL.ini
#	conf/locale/locale_pt-BR.ini
#	conf/locale/locale_ru-RU.ini
#	conf/locale/locale_tr-TR.ini
#	conf/locale/locale_uk-UA.ini
#	conf/locale/locale_vi-VN.ini
#	conf/locale/locale_zh-TW.ini
2022-05-31 16:37:23 +08:00
Joe Chen 8b395a49b3
chore: fix lint errors (#6951) 2022-05-16 20:59:09 +08:00
Joe Chen d06ba7e527
ci: mirror lint config from `main` 2022-05-05 16:18:01 +08:00
Joe Chen b0a902dcca
release: update version to 0.12.7 2022-05-05 16:10:55 +08:00
Joe Chen bc77440b30
attachment: set CSP header in the serving endpoint (#6926) 2022-05-05 16:01:44 +08:00
Joe Chen 2a8f561c64
mod: update golang.org/x/crypto/ssh (#6884)
# Conflicts:
#	go.mod
#	go.sum
2022-04-06 21:34:26 +08:00
E99p1ant 8a046c22a8
context: fix Access-Control-Allow-Credentials header typo (#6381) 2022-04-06 21:30:38 +08:00
Joe Chen 26395294bd
go mod tidy 2022-03-19 14:39:55 +08:00
Joe Chen c91365774b
Fix tests 2022-03-19 14:34:43 +08:00
Joe Chen dff067ac28
ci: add go 1.18.x 2022-03-19 14:29:05 +08:00
Joe Chen 45fdfecf64
Disable flaky generated files check 2022-03-19 14:28:24 +08:00
Joe Chen 1bf5d89386
run task generate 2022-03-19 14:08:46 +08:00
Joe Chen 670cbccf98
release: update version to 0.12.3 2022-03-19 14:07:09 +08:00
Joe Chen 4e10265568
chore: run `task generate` (#6844)
# Conflicts:
#	.github/workflows/go.yml
#	internal/assets/templates/templates_gen.go
2022-03-15 22:44:47 +08:00
tc608 640e2f62e0
templates: fetch fixed size of members' avatar (#5755)
Co-authored-by: Joe Chen <jc@unknwon.io>
2022-03-15 22:43:11 +08:00
Joe Chen eddae31ada
conf: add allowlist for accessing local network (#6842)
# Conflicts:
#	CHANGELOG.md
#	internal/assets/conf/conf_gen.go
#	internal/assets/templates/templates_gen.go
#	internal/conf/static.go
#	internal/conf/testdata/TestInit.golden.ini
2022-03-14 23:54:23 +08:00
Joe Chen 0fef3c9082
repo_editor: check upload `TreePath` and file name (#6838) 2022-03-14 00:37:34 +08:00
Bo Lorentsen 5aca56d2dd
docker: check "/data" mount ownership before forcing it (#6553)
Co-authored-by: bl <bl@moch.dk>
2022-03-13 21:44:43 +08:00
Joe Chen e309bc8324
release: update version to 0.12.5 2022-03-11 14:58:57 +08:00
ysf 64102be2c9
security: fix improper PAM authorization handling (#6819)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/auth/pam/pam.go
2022-03-11 14:52:11 +08:00
Michael Rowley 91f2cde5e9
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/route/repo/webhook.go
2022-03-11 14:51:32 +08:00
Joe Chen b3541030c3
Update Taskfile for Windows 2022-01-18 00:23:27 +08:00
Joe Chen bc8b8c3767
Add Taskfile 2022-01-17 21:38:13 +08:00