You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
forgejo/routers
Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340)
* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject
5 years ago
..
admin Graceful: Xorm, RepoIndexer, Cron and Others (#9282) 5 years ago
api/v1 [API] dont reqToken on GetReactions (fix #9543) (#9548) 5 years ago
dev Display ui time with customize time location (#7792) 5 years ago
org site admin could view org's members (#9346) 5 years ago
private Add branch protection option to block merge on requested changes. (#9592) 5 years ago
repo Only serve attachments when linked to issue/release and if accessible by user (#9340) 5 years ago
routes Only serve attachments when linked to issue/release and if accessible by user (#9340) 5 years ago
user Only serve attachments when linked to issue/release and if accessible by user (#9340) 5 years ago
utils Slack webhook channel name cannot be empty or just contain an hashtag (#4786) 6 years ago
home.go Use Req.URL.RequestURI() to cope with FCGI urls (#9473) 5 years ago
init.go Refactor code indexer (#9313) 5 years ago
install.go Graceful: Xorm, RepoIndexer, Cron and Others (#9282) 5 years ago
metrics.go Use gitea forked macaron (#7933) 5 years ago
swagger_json.go Swagger.v1.json template (#3572) 6 years ago