0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-24 16:16:35 -05:00
forgejo/routers
Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340)
* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject
2020-01-05 01:20:08 +02:00
..
admin Graceful: Xorm, RepoIndexer, Cron and Others (#9282) 2019-12-15 09:51:28 +00:00
api/v1 [API] dont reqToken on GetReactions (fix #9543) (#9548) 2020-01-02 23:27:31 +02:00
dev Display ui time with customize time location (#7792) 2019-08-15 22:46:21 +08:00
org site admin could view org's members (#9346) 2019-12-14 01:36:59 -05:00
private Add branch protection option to block merge on requested changes. (#9592) 2020-01-03 19:47:09 +02:00
repo Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
routes Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
user Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
utils Slack webhook channel name cannot be empty or just contain an hashtag (#4786) 2018-09-10 10:31:08 -04:00
home.go Use Req.URL.RequestURI() to cope with FCGI urls (#9473) 2019-12-24 00:11:12 +00:00
init.go Refactor code indexer (#9313) 2019-12-23 20:31:16 +08:00
install.go Graceful: Xorm, RepoIndexer, Cron and Others (#9282) 2019-12-15 09:51:28 +00:00
metrics.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
swagger_json.go