Michael Kuhn 0222623be9 Explicitly disable Git credential helper (#5367) ... * Explicitly disable Git credential helper If the user running Gitea has configured a credential helper, Git credentials might leak out of Gitea. There are two problems with credential helpers when combined with Gitea: 1. Credentials entered by a user when doing a migration or setting up a mirror will end up in the credential store. In the worst case, this is the plain text file ~/.git-credentials. 2. Credentials in the credential store will be used for migrations and mirrors by all users. For example, if user A sets up a mirror, their credentials will be stored. If user B later sets up a mirror from the same host and does not enter any credentials, user A's credentials will be used. This PR prepends -c credential.helper= to all Git commands to clear the list of helpers. This requires at least Git version 2.9, as previous versions will try to load an empty helper instead. For more details, see 24321375cd * Update git module		2018-11-28 09:00:25 +02:00
..
blob.go
command.go	Explicitly disable Git credential helper (#5367)	2018-11-28 09:00:25 +02:00
commit.go	Add push webhook support for mirrored repositories (#4127)	2018-09-06 22:06:09 -04:00
commit_archive.go
commit_info.go
doc.go
error.go
git.go
hook.go
LICENSE
parse.go
ref.go	Implement git refs API for listing references (branches, tags and other) (#5354)	2018-11-27 16:52:20 -05:00
repo.go
repo_blame.go
repo_blob.go	Add raw blob endpoint to get objects by SHA ID (#5334)	2018-11-18 13:45:40 -05:00
repo_branch.go	Implement git refs API for listing references (branches, tags and other) (#5354)	2018-11-27 16:52:20 -05:00
repo_commit.go	Add push webhook support for mirrored repositories (#4127)	2018-09-06 22:06:09 -04:00
repo_hook.go
repo_object.go
repo_pull.go
repo_ref.go	Implement git refs API for listing references (branches, tags and other) (#5354)	2018-11-27 16:52:20 -05:00
repo_tag.go
repo_tree.go	Explicitly disable Git credential helper (#5367)	2018-11-28 09:00:25 +02:00
sha1.go
signature.go
submodule.go
tag.go
tree.go	Explicitly disable Git credential helper (#5367)	2018-11-28 09:00:25 +02:00
tree_blob.go
tree_entry.go	Explicitly disable Git credential helper (#5367)	2018-11-28 09:00:25 +02:00
utils.go