Joe Chen 1cba9bc81b web_editor: prohibit CRUD to symbolic files (#7981) ...

Fixes
[GHSA-wj44-9vcg-wjq7](https://github.com/gogs/gogs/security/advisories/GHSA-wj44-9vcg-wjq7)

---------

Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>

2025-06-08 18:47:04 -04:00

..

app

route: no session for routes without UI (#6066)

2020-04-05 06:36:08 +08:00

auth

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

authutil

lfs: implement HTTP routes (#6035)

2020-04-04 21:14:15 +08:00

avatar

refactor(db): migrate avatar methods off user.go (#7206)

2022-10-23 20:54:16 +08:00

cmd

email: fix unable to override templates in custom directory (#7905)

2025-06-08 18:45:12 -04:00

conf

feat(ssh): support dynamic list of algorithms (#7345)

2023-02-12 13:10:41 +08:00

context

refactor(db): merge relation stores into entity stores (#7341)

2023-02-08 13:55:54 +08:00

cron

ci: use new lint action and add custom config (#6562)

2021-05-19 13:38:13 +08:00

cryptoutil

access_token: encrypt access token with SHA256 (#7008)

2022-06-05 13:34:21 +08:00

db

web_editor: prohibit CRUD to symbolic files (#7981)

2025-06-08 18:47:04 -04:00

dbtest

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

dbutil

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

email

email: fix unable to override templates in custom directory (#7905)

2025-06-08 18:45:12 -04:00

errutil

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

form

conf: add new config option for default branch name (#7291)

2023-02-11 16:37:24 +08:00

gitutil

refactor(db): merge relation stores into entity stores (#7341)

2023-02-08 13:55:54 +08:00

httplib

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

lazyregexp

db: refactor "action" table to use GORM (#7054)

2022-06-25 18:07:39 +08:00

lfsutil

chore: remove usages of the deprecated ioutil (#7332)

2023-02-04 13:43:36 +08:00

markup

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

mocks

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

netutil

mod: bump gorm.io/driver/postgres from 1.4.5 to 1.4.6 (#7299)

2023-01-07 16:52:04 +08:00

osutil

web_editor: prohibit CRUD to symbolic files (#7981)

2025-06-08 18:47:04 -04:00

pathutil

api: clean file path for updating repo contents (#7859)

2024-12-22 16:55:01 -05:00

process

autofix: format code with gofumpt and gofmt (#6803)

2022-03-06 17:55:17 +08:00

repoutil

refactor(db): migrate ChangeUsername off user.go (#7261)

2022-11-25 22:40:20 +08:00

route

ci: fix up lint issues

2024-12-22 17:33:50 -05:00

semverutil

all: use semver to compare versions (#6147)

2020-05-04 18:48:23 +08:00

ssh

ssh: make env command a passthrough (#7868)

2024-12-22 17:04:03 -05:00

strutil

refactor(db): add Users.Update (#7263)

2022-11-27 15:19:44 +08:00

sync

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

template

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

testutil

chore: update Go versions in CI (#7346)

2023-02-19 18:10:34 +08:00

tool

all: replace interface{} with any (#7330)

2023-02-02 21:25:25 +08:00

userutil

refactor(db): migrate methods off user.go (#7228)

2022-11-05 17:55:05 +08:00