aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove accidental debugging in blob_excerpt.tmpl (#18287)zeripath2022-01-161-2/+2
| | | | | | | | | | | * Remove accidental debugging in blob_excerpt.tmpl Unfortunately it appears that a small bit of debugging code was left in blob_excerpt.tmpl This breaks diff expansion causing #18281. Fix #18281 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Prevent possible XSS when using jQuery (#18289)Gusted2022-01-1610-34/+39
| | | | | | | In the case of misuse or misunderstanding from a developer whereby, if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the creation of a new element. Current usage is using hard-coded selectors in the templates, but nobody prevents that from expanding to user-controlled somehow.
* Return nicer error if trying to pull from non-existent user (#18288)zeripath2022-01-161-3/+12
| | | | | | | | | | | * Return nicer error if trying to pull from non-existent user Gitea serv will currently return an 500 if we try to pull from a repository where the owner does not exist. This PR checks for the UserNotExist Error when checking for the user and will return a NotFound error instead. Fix #18225
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-1626-469/+0
|
* docs: mention client_max_body_size affects LFS (#18291)Jan Tojnar2022-01-151-0/+1
|
* Add lockfile-check (#18285)silverwind2022-01-153-1/+14
| | | | | | | * Add lockfile-check This check runs `npm install` which will rewrite the lockfile in case it is inconsistent with package.json. This check detects this and will fail the CI in such a case.
* Webauthn nits (#18284)zeripath2022-01-1510-40/+87
| | | | | | | This contains some additional fixes and small nits related to #17957 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Update `package-lock.json` (#18283)Gusted2022-01-151-35/+35
| | | | | - NPM didn't like that package-lock.json was out-of-sync, webpack throwed some errors as well with building. - Follow-up for: #18278
* Upgrade EasyMDE to 2.16.1 (#18278)wxiaoguang2022-01-151-1/+1
|
* Remove golang vendored directory (#18277)techknowlogick2022-01-146586-2584499/+46
| | | | | | | * rm go vendor * fix drone yaml * add to gitignore
* Changelog for 1.15.10 (#18274) (#18276)zeripath2022-01-142-1/+13
| | | | | | | | | | | | | | | | | | | | | * Changelog for 1.15.10 (#18274) [1.15.10](https://github.com/go-gitea/gitea/releases/tag/v1.15.10) - 2022-01-14 * BUGFIXES * Fix inconsistent PR comment counts (#18260) (#18261) * Fix release link broken (#18252) (#18253) * Fix update user from site administration page bug (#18250) (#18251) * Set HeadCommit when creating tags (#18116) (#18173) * Use correct translation key for error messages due to max repo limits (#18135 & #18153) (#18152) * Fix purple color in suggested label colors (#18241) (#18242) * SECURITY * Bump mermaid from 8.10.1 to 8.13.8 (#18198) (#18206) * update docs/config.yaml Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: Richard Mahn <richmahn@users.noreply.github.com>
* Support webauthn (#17957)Lunny Xiao2022-01-14224-1075/+35036
| | | | | | | Migrate from U2F to Webauthn Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-142-1/+3
|
* Improve the comment for 2FA filter in admin panel (#18017)Gusted2022-01-131-1/+3
| | | | | Replace TODO with explanation Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* fix regression from #16075 (#18260)Norwin2022-01-141-3/+2
| | | | | | we don't want reviews to count towards comments, as this needs changes in other components as well (eg repo stats cron job, etc). Co-authored-by: 6543 <6543@obermui.de>
* Prevent underline hover on cards (#18259)silverwind2022-01-131-0/+1
| | | | | Prevent a undesired underline effect on hovered cards. This was regressed by #17898.
* Fix release link broken (#18252)Lunny Xiao2022-01-131-1/+1
| | | Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* migrations: a deadline at January 1st, 1970 is valid (#18237)Aravinth Manivannan2022-01-132-6/+42
| | | | | | | | | | | | | | | | | | | | | | | | | * migrations: a deadline at January 1st, 1970 is valid Do not change the deadline value if it is set to January 1st, 1970. Setting the deadline to year 9999 when it is zero (which is equal to January 1st, 1970) modifies a deadline set to January 1st, 1970 which is a valid date. In addition, setting a date in year 9999 will be converted to a null date in some cases. Signed-off-by: Loïc Dachary <loic@dachary.org> * tests: set milestone.deadline_unix in fixtures The value of deadline_unix must be set to 253370764800 (i.e. 9999-01-01) in fixtures, otherwise it will be inserted as null which leads to unexpected errors. For instance, DumpRepository will store a null deadline_unix as 0 (i.e. 1970-01-01) and RestoreRepository will change it to 9999-01-01. Signed-off-by: Loïc Dachary <loic@dachary.org> Co-authored-by: Loïc Dachary <loic@dachary.org> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Fix documents for development and bug report (#18249)wxiaoguang2022-01-134-26/+27
|
* Add/update SMTP auth providers via cli (#18197)Zoran Peričić2022-01-122-0/+208
| | | | | | | | Allow adding/updating SMTP authentication source via CLI using: - gitea admin auth add-smtp - gitea admin auth update-smtp Signed-off-by: Zoran Peričić <zpericic@netst.org>
* Fix NPE on try to get tag reference via API (#18245)65432022-01-129-14/+7
| | | | | * fix npe * rm gitRepo from Tag
* Fix update user bug (#18250)Lunny Xiao2022-01-121-1/+1
|
* [doc] https-setup: explain relative paths for {CERT,KEY}_FILE fields. (#18244)M. Zhou2022-01-111-0/+2
| | | Closes: https://github.com/go-gitea/gitea/issues/14401
* chore: remove unnecessary section (#18209)Bo-Yi Wu2022-01-111-6/+0
| | | | | | Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com> Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de>
* Fix purple color in suggested label colors (#18241)silverwind2022-01-111-1/+1
| | | | This looks like a typo that was introduced when these colors were added, causing what is supposed to be purple show up as green.
* Prevent NPE when viewing non-rendered files (#18234)zeripath2022-01-111-16/+18
| | | | | Fix #18231 Signed-off-by: Andrew Thornton <art27@cantab.net>
* Fix collobration template (#18232)Lunny Xiao2022-01-111-2/+2
|
* Fix identation typo in doc installation with Docker (#18233)Andrey Esin2022-01-112-6/+6
|
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-111-4/+28
|
* Fix source typos (#18227)luzpaz2022-01-102-4/+4
| | | Follow-up to #18219
* Fix various typos (#18219)luzpaz2022-01-1031-40/+40
| | | | | Found via `codespell -q 3 -S ./options/locale,./vendor -L ba,pullrequest,pullrequests,readby,te,unknwon` Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* Remove `ioutil` (#18222)Gusted2022-01-103-7/+6
| | | | | | | | | | | | - Don't use `ioutil` package anymore as it doesn't anything special anymore since Go 1.16: ``` // As of Go 1.16, the same functionality is now provided // by package io or package os, and those implementations // should be preferred in new code. ``` Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-1028-0/+52
|
* Fix typos in docs/content (#18215)Greg Myers2022-01-096-9/+9
|
* [skip ci] Updated licenses and gitignoresGiteaBot2022-01-092-21/+4
|
* In the Organization member page, 2fa column is too narrow for Simplified ↵capvor2022-01-091-2/+2
| | | | | Chinese and Chinese Traditional. (#18213) Expand 2fa column and Narrow the last column.
* Fix new team (#18212)Lunny Xiao2022-01-082-3/+11
| | | fix regression from #17811
* Fix EasyMDE image paste bug during refactoring (#18207)wxiaoguang2022-01-082-4/+9
|
* Sort locales according to their names (#18211)delvh2022-01-081-1/+9
| | | | | * Sort locales according to their names * Fix documentation and sort case insensitive
* Restore setting of ctx.Repo.Mirror (#18205)zeripath2022-01-081-4/+4
| | | | | | | | | | | | | | In #17933 repoAssignment no longer sets the ctx.Repo.Mirror field meaning that attempting change mirror settings results in an NPE. This PR simply restores this. Either we should remove this field or, we should set it. At present it seems simplest to set it instead of going looking in the Data for the value although converting the context to a bag of things may be the correct approach in the future. Fix #18204 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-082-0/+15
|
* Show OAuth callback error message (#18185)KN4CK3R2022-01-072-1/+38
| | | | | | | | | | | * Show callback error message. * lint * Use error code to display a message. Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: Lauris BH <lauris@nix.lv> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* Fix CSS specificity issue with easymde's css (#18201)silverwind2022-01-072-1/+2
| | | | | | | | | | | | | | | | * Fix CSS specificity issue with easymde's css PR #18069 introduced a regression in certain overwritten editor styles because the dynamic loading of easymde.min.css causes its's style to apply after our supposed override styles. Solve this by bundling the styles into index.css. We should later aim to completely replace easymde.min.css completely with our own styles so there are no more conflicts. * Update web_src/js/features/comp/EasyMDE.js Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Fix mermaid rendering in milestone dashboard (#18202)silverwind2022-01-071-1/+1
| | | Fixes: https://github.com/go-gitea/gitea/issues/18200
* Don't store assets modified time into generated files (#18193)Lunny Xiao2022-01-0611-22/+110
|
* Add warning for BIDI characters in page renders and in diffs (#17562)zeripath2022-01-0726-87/+809
| | | | | | | | | | | | Fix #17514 Given the comments I've adjusted this somewhat. The numbers of characters detected are increased and include things like the use of U+300 to make à instead of à and non-breaking spaces. There is a button which can be used to escape the content to show it. Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: Gwyneth Morgan <gwymor@tilde.club> Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* [skip ci] Updated translations via CrowdinGiteaBot2022-01-0727-118/+23
|
* Bump mermaid from 8.13.4 to 8.13.8 (#18198)dependabot[bot]2022-01-062-16/+16
| | | | | | | | | | | | | | | | Bumps [mermaid](https://github.com/knsv/mermaid) from 8.13.4 to 8.13.8. - [Release notes](https://github.com/knsv/mermaid/releases) - [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/docs/CHANGELOG.md) - [Commits](https://github.com/knsv/mermaid/compare/8.13.4...8.13.8) --- updated-dependencies: - dependency-name: mermaid dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix location for custom/options/license (#18194)yearski2022-01-061-1/+1
|
* Enable partial clone by default (#18195)Gusted2022-01-065-30/+14
| | | | | - Enable partial clones(which are by default disabled from git) by default, unless configured otherwise. - Resolves #18190