forgejo/services
zeripath 9e8b1c6630
Double check CloneURL is acceptable (#20869) (#20892)
Backport #20869

Some Migration Downloaders provide re-writing of CloneURLs that may point to
unallowed urls. Recheck after the CloneURL is rewritten.

Signed-off-by: Andrew Thornton <art27@cantab.net>

Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-08-21 09:42:48 -05:00
..
agit move agit dependcy (#19998) 2022-06-17 20:17:12 +02:00
asymkey Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
attachment Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
auth EscapeFilter the group dn membership (#20200) (#20254) 2022-07-06 20:51:40 +01:00
automerge Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
comments Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
context Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
cron Move some code into models/git (#19879) 2022-06-12 23:51:54 +08:00
externalaccount Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
forms Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
gitdiff Remove legacy git code (ver < 2.0), fine tune markup tests (#19930) 2022-06-16 23:47:44 +08:00
issue Check if project has the same repository id with issue when assign project to issue (#20133) (#20188) 2022-07-01 15:00:05 +02:00
lfs Move some code into models/git (#19879) 2022-06-12 23:51:54 +08:00
mailer Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
migrations Double check CloneURL is acceptable (#20869) (#20892) 2022-08-21 09:42:48 -05:00
mirror Always try to fetch repo for mirrors (#19975) 2022-06-15 23:58:44 +08:00
org Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
packages Use correct context to get package content (#20673) (#20676) 2022-08-05 14:55:16 -04:00
pull Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839) (#20848) 2022-08-18 14:55:34 -04:00
release fix permission check for delete tag (#19985) 2022-06-16 22:03:03 +02:00
repository Add migrate repo archiver and packages storage support on command line (#20757) (#20806) 2022-08-18 09:27:56 +08:00
task Use a more general (and faster) method to sanitize URLs with credentials (#19239) 2022-03-31 10:25:40 +08:00
user Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
webhook fix(telegram): fix link bot to release tag (#19830) 2022-05-28 16:44:51 -04:00
wiki Move some helper files out of models (#19355) 2022-05-08 18:46:32 +02:00