forgejo/modules
JakobDev a12f575737
Clean Path in Options (#23006)
At the Moment it is possible to read files in another Directory as
supposed using the Options functions. e.g.
`options.Gitignore("../label/Default) `. This was discovered while
working on #22783, which exposes `options.Gitignore()` through the
public API. At the moment, this is not a security problem, as this
function is only used internal, but I thought it would be a good idea to
make a PR to fix this for all types of Options files, not only
Gitignore, to make it safe for the further. This PR should be merged
before the linked PR.

---------

Co-authored-by: Jason Song <i@wolfogre.com>
2023-03-08 15:07:58 +08:00
..
actions
activitypub
analyze
auth
avatar
base Use minio/sha256-simd for accelerated SHA256 (#23052) 2023-02-22 14:21:46 -05:00
cache
charset
container Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
context Use minio/sha256-simd for accelerated SHA256 (#23052) 2023-02-22 14:21:46 -05:00
csv
doctor Refactor setting.Database.UseXXX to methods (#23354) 2023-03-07 18:51:06 +08:00
emoji
eventsource
generate
git Refactor and tidy-up the merge/update branch code (#22568) 2023-03-07 15:07:35 -05:00
gitgraph
graceful
hcaptcha
highlight
hostmatcher
html
httpcache
httplib
indexer
issue/template
json
label Add loading yaml label template files (#22976) 2023-03-02 01:44:23 +02:00
lfs
log Improve trace logging for pulls and processes (#22633) 2023-02-03 18:11:48 -05:00
markup
mcaptcha Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
metrics
migration
mirror
nosql
notification
options Clean Path in Options (#23006) 2023-03-08 15:07:58 +08:00
packages Use import of OCI structs (#22765) 2023-02-06 10:07:09 +00:00
paginator Update gitea-vet to check FSFE REUSE (#22004) 2022-12-02 22:14:57 +08:00
pprof
private
process
proxy
proxyprotocol
public Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
queue Properly flush unique queues on startup (#23154) 2023-02-28 17:55:43 -05:00
recaptcha
references Use correct captured group range when parsing cross-reference (#22672) 2023-01-31 10:08:05 +01:00
regexplru
repository Add loading yaml label template files (#22976) 2023-03-02 01:44:23 +02:00
secret Use minio/sha256-simd for accelerated SHA256 (#23052) 2023-02-22 14:21:46 -05:00
session
setting Refactor setting.Database.UseXXX to methods (#23354) 2023-03-07 18:51:06 +08:00
sitemap
ssh
storage
structs Add scopes to API to create token and display them (#22989) 2023-02-20 15:28:44 -06:00
svg
sync
system
templates Add context when rendering labels or emojis (#23281) 2023-03-05 22:59:05 +01:00
test
timeutil
translation
turnstile
typesniffer Do not recognize text files as audio (#23355) 2023-03-07 22:40:41 -05:00
updatechecker
upload
uri Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
user
util Use minio/sha256-simd for accelerated SHA256 (#23052) 2023-02-22 14:21:46 -05:00
validation
watcher
web
webhook