5155f026b4
Security: fix XSS attack on milestone
...
Reported by Miguel Ángel Jimeno.
2017-02-17 08:06:48 -05:00
d521e716dd
refactoring: SSH and HTTP push procees is now unified
...
We used to handle SSH and HTTP push separately which produces
duplicated code, but now with post-receive hook, the process
is unified to one single place and much cleaner.
Thus, UpdateTask struct is removed.
Narrow down the range of Git HTTP routes to reduce condufsing
HTTP Basic Authentication window popup on browser.
By detecting <old-commit, new-commit, ref-name> inside post-receive
hook, Git HTTP doesn't need to read the whole content body anymore,
which completely solve the RAM problem reported in #636 .
2017-02-16 16:33:49 -05:00
f129e0ecb5
repo/editor: fix breadcrumb path cuts parent dirs ( #3859 )
2017-02-16 08:34:49 -05:00
189924cabf
repo/branch: force delete merged branch ( #4128 )
2017-02-15 18:24:32 -05:00
94f91543b6
Fix compilation error
2017-02-15 04:09:07 -05:00
a45205b988
Commits fetch concurrency ( #3837 )
2017-02-15 03:59:53 -05:00
279e475b89
webhook: match email with real user in database for test delivery ( #3652 )
2017-02-14 03:32:13 -05:00
d21767dc9f
routers/repo: allow shorter SHA to download archive ( #3834 )
...
SHA length from 7-40 is now supported.
2017-02-12 18:28:42 -05:00
0958fe5a4e
Improve Open Graph Meta tags ( #3664 )
2017-02-11 00:03:10 -05:00
2ca668e79e
Add more details on error report
...
[CI SKIP]
2017-02-10 17:11:46 -05:00
9b8fa69c15
models/ssh_key: fix SSH_KEYGEN_PATH not working ( #3770 )
2017-02-10 02:26:55 -05:00
eb66060cd7
log: start using gopkg.in/clog.v1
2017-02-09 19:29:59 -05:00
074c92b0a3
routers/repo/branch: fix can't delete branch with slashes after merge ( #4089 )
2017-02-09 15:25:48 -05:00
afab38b0d7
routers/repo/pull: fix 404 on PR compare ( #4074 )
...
Due to recent code refactor, ctx.PullRequest is not initialized for
route repo.CompareAndPullRequest, which leads the UI thinks the
compare is not happening inside the same repository.
The current fix is to allow compare URL to include redundant head
user name so everything works fine again, but code logic isn't
as clean as before.
Made comments about possible future fix.
2017-02-08 18:43:46 -05:00
0d9e435bfe
IPythonNotebook: CSS adjustment for PR #4070
2017-02-07 17:11:46 -05:00
9af0dd23dd
Ipython notebook support ( #4070 )
...
* added marked and notebookjs javascript libraries
* added ipython notebook render support using javascript libraries
* recompiled gogs.css to include ipynb-related css
* removed superflous javascript library files
2017-02-07 16:18:11 -05:00
2527037973
routers/repo: minor code fix for PR #3758
2017-02-01 07:24:20 -05:00
1d951cfc49
Fix 500 when repo has invalid .editorconfig ( #3758 )
...
Creating a notice instead
Fixes #3643
2017-02-01 07:21:03 -05:00
be3a13a0d6
Allow use to set an external tracker url and to redirect user when clicking in Issues same behavior as Wiki. ( #3646 )
2017-01-31 20:53:48 -05:00
7463d9c51d
Fix can not save release draft as draft again ( #3669 )
...
But release was not saved as draft in the first time, is not
possible to be draft afterwards because the Git tag was created.
2017-01-30 13:21:24 -05:00
4bc98f7aa2
Move models/mail.go to modules/mail.go
...
To use interface to replace *models.User in avoiding cycle import.
2017-01-30 07:20:48 -05:00
a2f2f7717a
Fix template error when rendering non-README markdown ( #4063 )
2017-01-27 16:52:19 -05:00
8cb903fbbb
Fix unexpected rendering of README when it is not in Markdown
...
This patch also handles case when a file name looks like README
but is not a text file (e.g. image, PDF).
2017-01-25 07:10:52 -05:00
e8c3e9bcf8
Improve code for fix of #4006
2017-01-03 11:02:14 +08:00
cdfcef04a1
Fix incorrect logic check for fork repo action
2017-01-03 10:39:05 +08:00
8aa35577b3
Fix vulnerability reported in #4006
2017-01-03 10:36:27 +08:00
d528704503
Minor code fix for PR #3560
2016-12-27 20:26:35 +08:00
e6ef75204b
Fix assigned/created issues in dashboard. ( #3560 )
...
* Fix assigned/created issues in dashboard.
* Use GetUserIssueStats for getting all Dashboard stats.
* Use gofmt to format the file properly.
* Replace &Issue{} with new(Issue).
* Check if user has access to given repository.
* Remove unnecessary filtering of issues.
* Return 404 error if invalid repository is given.
* Use correct number of issues in paginater.
2016-12-27 18:54:24 +08:00
2994272e91
Code fix for PR #3748
2016-12-23 20:44:27 -05:00
cdedc2d188
Use temporary file to avoid out-of-memory when receiving big chunks. ( #3748 )
...
* Use temporary file to avoid out-of-memory when receiving big chunk.
Not perfect but I think it's a reasonable solution.
For small request bodies, I suppose performance wouldn't be an issue.
For large ones, this seems to be a necessary evil.
* Must close the open file to avoid fd leaks
2016-12-23 19:50:12 -05:00
03f7f3ee67
Some code renaming
2016-12-22 19:58:30 -05:00
6383bf7480
Fix reported vulnerability
...
Ability to use labels from arbitrary repositories.
Reported by Miguel Ángel Jimeno.
2016-12-22 19:44:59 -05:00
f471ef1bc7
Fix vulnerability reported in #3962
2016-12-22 19:35:06 -05:00
16d3e7085e
Minor fix for PR #3667
2016-12-22 01:51:49 -05:00
c47fbc629b
Feature #2583 : Disable HTTP cloning ( #3667 )
...
* Can disable GIT interactions by HTTP protocol
* rename variable + fix wiki link
* missing space
2016-12-22 01:42:04 -05:00
d04b19545d
Code fix for PR #3547
2016-12-22 01:28:06 -05:00
6cc992ea54
Minor fix for PR #3687
2016-12-21 23:52:11 -05:00
3376354ed8
Check if file is a symlink with web editor ( #3687 )
...
* editor checks for symlinks
* translate file_is_a_symlink message
* credit translation author
2016-12-21 23:49:56 -05:00
67380cf47b
Minor code fix
2016-12-21 04:08:23 -05:00
39fdb0f9c4
Fixed 404 caused by unexpected question mark ( #3668 )
...
This fixes 404 caused when creating new files or wiki pages with question marks.
2016-12-21 04:05:49 -05:00
adcb1d7c65
serve video files using the HTML5 video tag ( #3967 )
2016-12-21 03:40:23 -05:00
44ed991726
Merge branch 'develop' of https://github.com/tanapoln/gogs into develop
2016-12-21 00:49:44 -05:00
73fedc7275
provide button to delete merged pull request
2016-09-02 10:12:21 +07:00
dadd35b636
#3559 fix template error
2016-08-31 13:59:23 -07:00
cd9b926af7
Support Editorconfig on web editor ( #3512 )
2016-08-30 16:47:22 -07:00
9ac46fb983
Support Editorconfig on web editor
2016-08-30 20:30:47 -03:00
8516dfcb6c
#2018 able to sync now for mirrors
...
- Refactor code to use sync.UniqueQueue
- Closes #3509
2016-08-30 16:18:33 -07:00
643142acab
Web editor: support upload files
2016-08-30 05:23:59 -07:00
780cc2d110
router/repo: code refactoring
2016-08-30 02:08:38 -07:00
28cf0e6aaa
#3459 code quality improvement
2016-08-29 20:00:06 -07:00
Unknwon