meissa
/
forgejo
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
forgejo-federated-star
forgejo
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '0222623be9'
${ noResults }
forgejo/modules
History
Michael Kuhn 0222623be9 Explicitly disable Git credential helper (#5367) 
* Explicitly disable Git credential helper

If the user running Gitea has configured a credential helper, Git
credentials might leak out of Gitea.

There are two problems with credential helpers when combined with Gitea:

1. Credentials entered by a user when doing a migration or setting up a
   mirror will end up in the credential store. In the worst case, this
   is the plain text file ~/.git-credentials.
2. Credentials in the credential store will be used for migrations and
   mirrors by all users. For example, if user A sets up a mirror, their
   credentials will be stored. If user B later sets up a mirror from the
   same host and does not enter any credentials, user A's credentials
   will be used.

This PR prepends -c credential.helper= to all Git commands to clear the
list of helpers. This requires at least Git version 2.9, as previous
versions will try to load an empty helper instead. For more details, see
24321375cd

* Update git module
 		6 years ago
..
auth Block registration based on email domain (#5157) 6 years ago
avatar Use assert in legacy unit tests (#867) 7 years ago
base Serve audio files using HTML5 audio tag (#5221) 6 years ago
cache Fix memcache support when value is returned as string always (#2924) 7 years ago
context Add raw blob endpoint to get objects by SHA ID (#5334) 6 years ago
cron Add branch overiew page (#2108) 7 years ago
generate Implements generator cli for secrets (#3531) 6 years ago
highlight No highlighting for .txt files (#1922) 7 years ago
httplib Add sensitive headers (#3429) 7 years ago
indexer Global code search support (#3664) 6 years ago
lfs add valid for lfs oid (#4461) 6 years ago
log Remove maxlines option for file logger (#5282) 6 years ago
mailer Explicitly decide whether to use TLS in mailer's configuration (#5024) 6 years ago
markup support envs on external render commands (#5278) 6 years ago
metrics Prometheus endpoint (#5256) 6 years ago
minwinsvc Fix Git hooks not being executed on Windows when running as a service (#1149) 7 years ago
notification Add notification interface and refactor UI notifications (#5085) 6 years ago
options Fix typos in models/ and modules/ (#1248) 7 years ago
pprof cmd/serve: pprof cpu and memory profile dumps to disk (#4560) 6 years ago
private Make gitea serv use api/internal (#4886) 6 years ago
process Fix run command race (#1470) 7 years ago
public Enable caching on assets and avatars (#3376) 6 years ago
recaptcha Add Recaptcha functionality to Gitea (#4044) 6 years ago
search Global code search support (#3664) 6 years ago
setting Explicitly disable Git credential helper (#5367) 6 years ago
ssh Configurable SSH key exchange algorithm and MAC suite (#2806) 7 years ago
sync Fix status table race condition (#1835) 7 years ago
templates Create Progressive Web App (#4730) 6 years ago
test API endpoint for testing webhook (#3550) 6 years ago
user Remove check for negative length (#5120) 6 years ago
util Fix open redirect vulnerability on login screen (#4312) 6 years ago
validation Improve URL validation for external wiki and external issues (#4710) 6 years ago