gitea

20,692 Commits 22 Branches 259 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
bircni GitHub Lunny Xiao	5facdcc7fd	fix: Various sec fixes (#38108 ) (#38147 ) Backport #38108 - Enforce repository token scope on RSS/Atom feed endpoints so a PAT without repo scope can no longer read private repo commit data. - Block HTTP redirects during repository migration clones to prevent SSRF reaching internal addresses via an attacker-controlled redirect. - Redact the notification subject after repo access is revoked so private issue/PR metadata is no longer leaked through the notification API. Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>	2026-06-17 21:43:22 +02:00
TheFox0x7andGitHub	0fde8ecd55	Enable testifylint rules (#34075 ) enable testifylint rules disabled in: https://github.com/go-gitea/gitea/pull/34054	2025-03-31 01:53:48 -04:00
Lunny XiaoandGitHub	dcd3014567	Add pubdate for repository rss and add some tests (#33411 ) Fix #33291	2025-01-27 23:58:46 +08:00

Author

SHA1

Message

Date

5facdcc7fd

fix: Various sec fixes (#38108 ) (#38147 )

Backport #38108

- Enforce repository token scope on RSS/Atom feed endpoints so a PAT
without repo scope can no longer read private repo commit data.
- Block HTTP redirects during repository migration clones to prevent
SSRF reaching internal addresses via an attacker-controlled redirect.
- Redact the notification subject after repo access is revoked so
private issue/PR metadata is no longer leaked through the notification
API.

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2026-06-17 21:43:22 +02:00

TheFox0x7andGitHub

0fde8ecd55

Enable testifylint rules (#34075 )

enable testifylint rules disabled in:
https://github.com/go-gitea/gitea/pull/34054

2025-03-31 01:53:48 -04:00

Lunny XiaoandGitHub

dcd3014567

Add pubdate for repository rss and add some tests (#33411 )

Fix #33291

2025-01-27 23:58:46 +08:00