mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2026-06-22 10:02:15 +00:00
4b83448b7d
- fix: prevent stored XSS in user display name on Actions page - fix: LFS locks must belong to the intended repo, port from Gitea - fix: prevent unauthorized access to draft releases via API - fix: prevent writes to OpenID visibility which may affect other users - fix: prevent viewing private PRs that are linked to public issues on public projects Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13001 Reviewed-by: 0ko <0ko@noreply.codeberg.org> Reviewed-by: Beowulf <beowulf@beocode.eu> |
||
|---|---|---|
| .. | ||
| TestCleanupCommitStatus | ||
| TestIterateRepositoryIDsWithLFSMetaObjects | ||
| branch.go | ||
| branch_list.go | ||
| branch_test.go | ||
| commit_status.go | ||
| commit_status_summary.go | ||
| commit_status_test.go | ||
| lfs.go | ||
| lfs_lock.go | ||
| lfs_lock_list.go | ||
| lfs_lock_test.go | ||
| lfs_test.go | ||
| main_test.go | ||
| protected_branch.go | ||
| protected_branch_list.go | ||
| protected_branch_list_test.go | ||
| protected_branch_test.go | ||
| protected_tag.go | ||
| protected_tag_test.go | ||