zeripath c0bbbdd30b Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272) ...

* Add CSRF checking to reqToken and place CSRF in the post for deadline creation

Fixes #5226, #5249

* /api/v1/admin/users routes should have reqToken middleware

2018-11-04 10:42:15 -05:00

..

auth

Add comment replies (#5147)

2018-10-23 10:38:06 -04:00

avatar

Use assert in legacy unit tests (#867)

2017-02-08 14:29:07 +08:00

base

Detect charset and convert non UTF-8 files for display (#4950)

2018-09-29 16:33:54 +08:00

cache

Fix memcache support when value is returned as string always (#2924)

2017-11-16 15:06:34 +08:00

context

Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272)

2018-11-04 10:42:15 -05:00

cron

Add branch overiew page (#2108)

2017-10-26 08:49:16 +08:00

generate

Implements generator cli for secrets (#3531)

2018-02-18 20:14:37 +02:00

highlight

No highlighting for .txt files (#1922)

2017-06-09 19:39:16 -05:00

httplib

Add sensitive headers (#3429)

2018-01-31 00:09:16 +02:00

indexer

Global code search support (#3664)

2018-03-16 22:04:33 +08:00

lfs

add valid for lfs oid (#4461)

2018-07-19 11:39:19 -04:00

log

Fix lint errors (#2547)

2017-09-19 11:08:30 +03:00

mailer

Add support for extra sendmail arguments (#2731)

2017-10-25 22:27:25 +03:00

markup

Upgrade images in .drone.yml to more recent versions (#4819)

2018-08-29 09:43:58 -04:00

minwinsvc

Fix Git hooks not being executed on Windows when running as a service (#1149)

2017-03-09 09:27:43 +08:00

notification

Notification - Step 1 (#523)

2016-12-31 00:44:54 +08:00

options

Fix typos in models/ and modules/ (#1248)

2017-03-15 08:52:01 +08:00

pprof

cmd/serve: pprof cpu and memory profile dumps to disk (#4560)

2018-08-07 14:49:18 -04:00

private

improve protected branch to add whitelist support (#2451)

2017-09-14 16:16:22 +08:00

process

Fix run command race (#1470)

2017-11-13 22:51:45 +08:00

public

Enable caching on assets and avatars (#3376)

2018-02-04 00:37:05 +02:00

recaptcha

Add Recaptcha functionality to Gitea (#4044)

2018-07-05 00:13:05 -04:00

search

Global code search support (#3664)

2018-03-16 22:04:33 +08:00

setting

Fix: Let's Encrypt configuration settings (#4911)

2018-09-12 00:06:44 -04:00

ssh

Configurable SSH key exchange algorithm and MAC suite (#2806)

2017-11-02 23:26:41 +08:00

sync

Fix status table race condition (#1835)

2017-05-31 16:57:17 +08:00

templates

Detect charset and convert non UTF-8 files for display (#4950)

2018-09-29 16:33:54 +08:00

test

API endpoint for testing webhook (#3550)

2018-04-29 14:21:33 +08:00

user

golint fixed for modules/user

2016-11-24 17:37:11 +08:00

util

Fix open redirect vulnerability on login screen (#4312)

2018-06-26 22:45:18 +08:00

validation

Improve URL validation for external wiki and external issues (#4710)

2018-08-15 09:29:37 +03:00