diff options
| author | wxiaoguang <wxiaoguang@gmail.com> | 2023-07-21 20:14:20 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-21 12:14:20 +0000 |
| commit | 52fb9367734100847249d074e2bc17f2aa91053e (patch) | |
| tree | c3e7b8466a249ac461f463b254a98fe9792b68ce /public/.well-known | |
| parent | 2f0e79e6393df13930eaa419273d24dc2ef36cfa (diff) | |
| download | gitea-52fb9367734100847249d074e2bc17f2aa91053e.tar.gz gitea-52fb9367734100847249d074e2bc17f2aa91053e.zip | |
Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
Replace #25892
Close #21942
Close #25464
Major changes:
1. Serve "robots.txt" and ".well-known/security.txt" in the "public"
custom path
* All files in "public/.well-known" can be served, just like
"public/assets"
3. Add a test for ".well-known/security.txt"
4. Simplify the "FileHandlerFunc" logic, now the paths are consistent so
the code can be simpler
5. Add CORS header for ".well-known" endpoints
6. Add logs to tell users they should move some of their legacy custom
public files
```
2023/07/19 13:00:37 cmd/web.go:178:serveInstalled() [E] Found legacy public asset "img" in CustomPath. Please move it to /work/gitea/custom/public/assets/img
2023/07/19 13:00:37 cmd/web.go:182:serveInstalled() [E] Found legacy public asset "robots.txt" in CustomPath. Please move it to /work/gitea/custom/public/robots.txt
```
This PR is not breaking.
---------
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Giteabot <teabot@gitea.io>
Diffstat (limited to 'public/.well-known')
| -rw-r--r-- | public/.well-known/security.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt new file mode 100644 index 0000000000..2cae3cbea4 --- /dev/null +++ b/public/.well-known/security.txt @@ -0,0 +1,6 @@ +# This site is running a Gitea instance. +# Gitea related security problems could be reported to Gitea community. +# Site related security problems should be reported to this site's admin. +Contact: https://github.com/go-gitea/gitea/blob/main/SECURITY.md +Policy: https://github.com/go-gitea/gitea/blob/main/SECURITY.md +Preferred-Languages: en |