Commit Graph

5043 Commits (f545faa06d553750b9f4018336e810530389f88c)

Author SHA1 Message Date
Unknwon f545faa06d
templates: make state changing routes to POST method (#5541)
- pkg/context: add ParamsUser to unify the injection process
2018-12-06 22:58:02 -05:00
Unknwon 458aadbb10
vendor: update github.com/go-macaron/session 2018-12-04 19:36:05 -05:00
Unknwon f2ec0d80a8
user/auth: flush and destroy session at logout (#5540)
Reported by @cezar97.
2018-12-04 19:35:44 -05:00
Unknwon be6bb5314e ci: update appveyor.yml 2018-12-03 20:00:28 -05:00
Unknwon 98114944fc
vendor: update github.com/gogs/go-gogs-client
Bring fixes for #5538
2018-12-03 14:45:19 -05:00
Unknwon 6690023555
pkg/context: use host address and apply insecure flag for go-get=1 when needed (#5305) 2018-12-03 13:36:11 -05:00
Unknwon a7e8187a0d
pkg/context: expose port in import path for 'go-get=1' (#5305) 2018-12-03 13:24:31 -05:00
Unknwon 0c1b72616a
locale: sync from Crowdin 2018-12-02 20:02:09 -05:00
Unknwon 945a378e55
public/css: adjust width of label color in dropdown
models/issue: unify Issue receiver name to 'issue'
2018-12-02 17:54:55 -05:00
Unknwon 29c5be47ed
models/issue: fix panic when clear labels (#5445) 2018-12-02 17:51:24 -05:00
无闻 e0f18b2255
github: update issue templates (#5537) 2018-12-02 15:25:06 -05:00
Unknwon e755aafe29
vendor: update github.com/gogs/go-gogs-client 2018-12-02 12:55:16 -05:00
Unknwon e1b3a25008
api/repo: support edit repository issue tracker (gogs/go-gogs-client#94) 2018-12-02 12:55:05 -05:00
Unknwon 69c1cd3f38
routes/api: change status handle to new style
Also fixed one bug that did not catch team not found error.
2018-12-01 21:41:30 -05:00
Unknwon ce13fbb98a
routes/api: allow get repository without login (#5475) 2018-12-01 21:40:19 -05:00
Samuel Cochran 084d9e0009 templates/user/dashboard: include 'org' query parameter in new mirror URL (#5534) 2018-11-29 07:21:16 -05:00
Unknwon 3db9b06a6e
api: fix critical CSRF vulnerabilities on API routes (#5355)
By explicitly requires token authentication.
2018-11-28 21:05:58 -05:00
Unknwon e9be8016e6
README: add new sponsor 2018-11-27 10:46:46 -05:00
Unknwon 1f9e21ebd5
templates/wiki: fix emoji rendering (#4869) 2018-11-26 07:02:21 -05:00
Unknwon a91d9054ad
conf: fix unexpected behavior of config inheritance (#5007) 2018-11-26 06:44:06 -05:00
Charles Kenney 6c90d12a0c routes/repo/issue: implement issue pre-filling (#5521)
Signed-off-by: Charles Kenney <charlesc.kenney@gmail.com>
2018-11-20 13:16:42 -05:00
Unknwon 38e8ccac92
conf: add go-bindata install command in README
[ci skip]
2018-11-20 02:37:16 -05:00
Unknwon 1d19a58424 locale: sync from Crowdin 2018-11-19 18:58:00 -05:00
Danilo Riecken P. de Morais f47f9ceade mirror: trigger additional push webhook on new branch (#5508)
This commit fixes issue #5473 and makes a new branch behave like a
      push event and trigger the appropriate webhook.
2018-11-14 23:03:03 -05:00
Federico Culloca 81effe674d templates/user/profile: added rel="me" to website link on user profile (#5485)
* Added rel="me" to website link on user profile

See issue #5008

* Added `nofollow` as per feedback
2018-11-12 20:49:30 -05:00
Unknwon 831251bcaa ci: remove Go master for the moment 2018-11-08 18:03:16 -05:00
A.J. Ruckman f4630f9044 public/css: add 'overflow-wrap: break-word' to dashboard news feeds (#5507) 2018-11-08 17:51:56 -05:00
William Hilton dae311ea9d repo/http: update CORS headers to allow custom user-agent (#5498)
At some point after #4970 was merged, isomorphic-git started sending a custom User-Agent in its HTTP requests to deal with some services (\*cough\* gists \*cough\*) which filtered git traffic by User-Agent. Sadly, this broke cloning from Gogs using isomorphic-git in the browser (https://github.com/isomorphic-git/isomorphic-git/issues/555). This PR fixes it by telling browsers it is OK for CORS requests to send a custom User-Agent header.
2018-11-07 18:14:15 -05:00
Unknwon 4677b46904
vendor: update github.com/go-macaron/session (#5469)
Fix security flaw reported by c957861129d62331c5704d2f04d11e41.
2018-11-06 22:22:02 -05:00
Unknwon a4dd2b1916
Merge branch 'master' of github.com:gogs/gogs into develop 2018-11-05 16:48:31 -05:00
Masen Furer 3d117b8964 Dockerfile.aarch64hub: install shadow package (#5481)
the shadow package contains the usermod(8) utility which is used by
start.sh and finalize.sh to configure the git user
2018-11-05 16:46:53 -05:00
hopegolden 6a083e9561 ldap: grammar fix (#5493) 2018-11-05 16:44:28 -05:00
hopegolden 044d359a7e docker: grammar fix (#5492) 2018-11-05 16:44:01 -05:00
Unknwon f35d4164d6
pkg/bindata: update content 2018-11-04 18:37:01 -05:00
Unknwon 3058f8fd69
conf: change default session cookie name
[CI SKIP]
2018-10-24 10:05:35 -04:00
Unknwon 5129ed215e
vendor: update github.com/go-macaron/session (#5469)
Fix security flaw reported by c957861129d62331c5704d2f04d11e41.
2018-10-24 09:59:07 -04:00
Unknwon b93079f1c1
vendor: update github.com/go-macaron/session (#5469)
Fix security flaw reported by c957861129d62331c5704d2f04d11e41.
2018-10-24 09:43:59 -04:00
Unknwon a1098384c0
vendor: update github.com/gogs/git-module 2018-10-23 07:02:13 -04:00
aboron 43bca4df40 ldap: fix group membership search handling when the group members are listed by 'dn' (#4684) (#4688)
Also, fixed typo in group member list return size check.
2018-10-23 04:16:39 -04:00
Unknwon 82269e4b8c
locale: sync from Crowdin 2018-10-16 16:58:18 -04:00
Unknwon 14e49614e6
gogs: rise Go requirement to 1.7 2018-10-03 20:49:49 -04:00
Unknwon a221b2807f
routes/repo/issue: fix redirect with unexpected escape (#5443) 2018-09-30 13:55:40 -04:00
Unknwon 0d66b1cc1c
pkg/context: apply EscapePound at context level
Always escape template variable {{.Link}} variable and  redirect calls.

Relates to #5442
2018-09-28 23:56:45 -04:00
Unknwon 1843354d88
templates/repo/setting: fix missing EscapePound (#5442) 2018-09-28 23:32:00 -04:00
Unknwon bd7d1e2f16
routes: fix open redirect vulnerability (#5355)
Reported by @cezar97.
2018-09-28 23:19:29 -04:00
Unknwon aff0bbcc32
pkg/ssh: print actual error in panic (#5435) 2018-09-28 15:37:34 -04:00
Unknwon 33e009bedb README: add FOSSA badge
[ci skip]
2018-09-26 19:04:41 -04:00
Unknwon f94dc67a43
librejs: add jQuery
[ci skip]
2018-09-19 13:24:49 -04:00
Unknwon 091f63fd4e
Makefile: only read GOPATH from env var
[ci skip]
2018-09-18 12:33:14 -04:00
Unknwon 3a4c981e31
locale: sync from Crowdin 2018-09-16 11:53:32 -04:00