summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Changelog v1.13.2 (#14535)v1.13.265432021-02-021-0/+32
|
* configure internal ssh server w/ macs and ciphers, backport of #14523 (#14530)Stefan2021-01-301-3/+7
|
* Set the name Mapper in migrations (#14526) (#14529)65432021-01-301-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | Migrations currently uses the default Xorm mapper which is not the same as the mapper Gitea actually uses. This means that there is a difference between the struct parsing and mapping to database tables in migrations as compared to normal Sync2. This was the cause for the catastrophic problem in v168 - untagged fields are not mapped in the same way in migrations as compared to outside of migrations. This is also likely the cause of some weird subtle failures in other migrations as any untagged field may not be being mapped exactly the same way. This PR suggests that we ensure that the mapper is set at the start of the migrations code - but also enforces a strict clean mapper between each migration. Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: zeripath <art27@cantab.net>
* Fix wiki preview (#14515)Lunny Xiao2021-01-291-1/+1
| | | Co-authored-by: Lauris BH <lauris@nix.lv>
* update code.gitea.io/sdk/gitea v0.13.1 -> v0.13.2 (#14497)65432021-01-2826-77/+151
|
* ChangeUserName: rename user files back on DB issue (#14447)65432021-01-251-3/+12
|
* Fix migration v141 (#14387) (#14388)65432021-01-232-3/+12
| | | | | * Fix mig 141 * temporary fix dump
* ensure timeout error is shown on u2f timeout (#14417) (#14431)zeripath2021-01-232-2/+2
| | | | | | | | Backport #14417 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: 6543 <6543@obermui.de>
* Fix lfs preview bug (#14428) (#14433)65432021-01-231-1/+4
| | | Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* [Backport] Fix Deadlock & Delete affected reactions on comment deletion ↵65432021-01-235-14/+23
| | | | | | | | | | | | | | | (#14392) (#14425) * Enhance Ghost comment mitigation Settings (#14392) * refactor models.DeleteComment and delete related reactions too * use deleteComment for UserDeleteWithCommentsMaxDays in DeleteUser * Resolve Fixme & fix potential deadlock * rm refactor * make diff eaven less
* Prevent panic on fuzzer provided string (#14405) (#14409)65432021-01-202-10/+53
| | | | | | | | | | | | | | | | | | | | | * Prevent panic on fuzzer provided string The fuzzer has found that providing a <body> tag with an attribute to PostProcess causes a panic. This PR removes any rendered html or body tags from the output. Signed-off-by: Andrew Thornton <art27@cantab.net> * Placate lint * placate lint again Signed-off-by: Andrew Thornton <art27@cantab.net> * minor cleanup Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: zeripath <art27@cantab.net>
* Use path not filepath in routers/editor (#14390) (#14396)65432021-01-191-4/+3
| | | | | | | | | The incorrect use of filepath instead of path means that it is possible to cause a stackoverflow on Windows Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: Lauris BH <lauris@nix.lv>
* Removed invalid form tag (#14391) (#14395)65432021-01-191-13/+10
| | | | | introduced by #5073 Co-authored-by: KN4CK3R <KN4CK3R@users.noreply.github.com>
* Check if label template exist first (#14384) (#14389)65432021-01-195-31/+38
|
* check release publisher exists (#14375)Norwin2021-01-181-1/+5
| | | | fixes #14365 was silently fixed in the feature PR #12096 for v1.14
* Use Request.URL.RequestURI() for fcgi (#14312) (#14347)Kyungmin Bae2021-01-152-5/+5
| | | Co-authored-by: Lauris BH <lauris@nix.lv>
* Use ServerError provided by Context (#14333) (#14345)Lunny Xiao2021-01-153-5/+5
| | | ... instead of InternalServerError by macaron
* Fix edit-label form init (#14337)Norwin2021-01-142-3/+3
|
* fix mailIssueCommentBatch for pull request (#14252) (#14296)a10121127962021-01-111-1/+5
| | | | | fix #14250 Signed-off-by: a1012112796 <1012112796@qq.com>
* Add secure/httpOnly attributes to the lang cookie (#14279) (#14280)65432021-01-072-14/+18
| | | | | | | * Add secure/httpOnly attributes to the lang cookie (#9690) (#14279) * apply to InitLocales() too Co-authored-by: Timo Gurr <timo.gurr@gmail.com>
* Render links for commit hashes followed by comma (#14224) (#14227)Nuno Silva2021-01-032-1/+7
| | | | | Regex test cases: https://regex101.com/r/mVbPxM/2/ fixes #14223
* Send notifications for mentions in pulls, issues, (code-)comments (#14218) ↵Jimmy Praet2021-01-0315-88/+205
| | | | | (#14221) Co-authored-by: techknowlogick <techknowlogick@gitea.io>
* Fix avatar bugs (#14217) (#14220)65432021-01-021-4/+3
| | | Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* Ensure that schema search path is set with every connection on postgres ↵zeripath2021-01-022-11/+85
| | | | | | | | | | | | | | | (#14131) (#14216) Backport #14131 Unfortunately every connection to postgres requires that the search path is set appropriately. This PR shadows the postgres driver to ensure that as soon as a connection is open, the search_path is set appropriately. Fix #14088 Signed-off-by: Andrew Thornton <art27@cantab.net>
* Fix dashboard issues labels filter bug (#14210) (#14214)Lunny Xiao2021-01-022-12/+26
|
* When visit /favicon.ico but the static file is not exist return 404 but not ↵Lunny Xiao2021-01-021-0/+1
| | | | | | | continue to handle the route (#14211) (#14213) Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
* fix branch selector on new issue page (#14194) (#14207)a10121127962021-01-012-2/+7
| | | | | | | fix #14185 Signed-off-by: a1012112796 <1012112796@qq.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
* Check for notExist on profile repository page (#14197) (#14203)zeripath2020-12-311-0/+3
| | | | | Backport #14197 Fix #14189
* Add changelog for v1.13.1 (#14172)v1.13.1Lunny Xiao2020-12-281-0/+36
| | | | | | | | | | | | | | | | | | | | | | | * Add changelog for v1.13.1 * Update CHANGELOG.md Co-authored-by: John Olheiser <john.olheiser@gmail.com> * Update CHANGELOG.md * Update CHANGELOG.md Co-authored-by: John Olheiser <john.olheiser@gmail.com> * Update CHANGELOG.md Co-authored-by: John Olheiser <john.olheiser@gmail.com> * Update CHANGELOG.md Co-authored-by: John Olheiser <john.olheiser@gmail.com> Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
* Fix bug of link query order on markdown render (#14156) (#14171)Lunny Xiao2020-12-285-24/+83
| | | | | | | | | * Fix bug of link query order on markdown render * Fix bluemonday bug and fix one wrong test Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: 6543 <6543@obermui.de>
* Migration: drop too long repo topics (#14152) (#14155)65432020-12-261-0/+9
| | | | | * Migration: drop to long repo topics * Update modules/migrations/gitea_uploader.go
* Fix escaping issue in diff (#14154)zeripath2020-12-261-4/+3
| | | | | Ensure that linecontent is escaped before passing to template.HTML Signed-off-by: Andrew Thornton <art27@cantab.net>
* Fix creation OAuth2 auth source from CLI. (#14146)Daniil Pankratov2020-12-253-3/+27
| | | Fix #8356
* Ensure that search term and page are not lost on adoption page-turn (#14133) ↵zeripath2020-12-242-1/+14
| | | | | | | | | (#14143) Backport #14133 Fix #14111 Signed-off-by: Andrew Thornton <art27@cantab.net>
* more test case for STORAGE_TYPE overrides (and fixes) (#14096) (#14104)65432020-12-222-8/+57
| | | | | Signed-off-by: 胡玮文 <huww98@outlook.com> Co-authored-by: 胡玮文 <huww98@outlook.com>
* Fix storage config implementation (#14091) (#14095)65432020-12-222-21/+177
| | | | | | | | | | | The design is very flexible, but not implemented correctly. This commit fixes several issues: * Costom storage type stated in https://docs.gitea.io/en-us/config-cheat-sheet/#storage-storage not working * [storage.attachments], [storage.minio] section not respected Signed-off-by: 胡玮文 <huww98@outlook.com> Co-authored-by: 胡玮文 <huww98@outlook.com>
* dep: update crypto. info: ↵techknowlogick2020-12-2137-51/+162
| | | | https://golangtutorial.dev/news/fix-in-crypto-package/ (#14078)
* Fix panic in BasicAuthDecode (#14046) (#14048)silverwind2020-12-192-0/+12
| | | | | | | | | | | | | * Fix panic in BasicAuthDecode If the string does not contain ":" that function would run into an `index out of range [1] with length 1` error. prevent that. * Update BasicAuthDecode() Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: zeripath <art27@cantab.net>
* [API] GetCombinedCommitStatusByRef always return json & swagger doc fixes ↵65432020-12-183-5/+136
| | | | | | | (#14047) * Fix swagger docs * always return json
* HotFix: Hide private partisipation in Orgs (#13994) (#14031)65432020-12-173-11/+40
| | | | | * HotFix: Hide private partisipation in Orgs Co-authored-by: zeripath <art27@cantab.net>
* Always wait for the cmd to finish (#14006) (#14039)zeripath2020-12-171-0/+1
| | | | | | | | Backport #14006 After cancelling the context we still need to wait for the command to finish otherwise zombie processes may occur Fix #13987
* Don't use simpleMDE editor on mobile devices for 1.13 (#14029)mrsdizzie2020-12-172-11/+37
| | | | | | | | | | | * Don't use simpleMDE editor on mobile devices simpleMDE doesn't work properly on mobile devices -- We've replaced it with the slightly more working easyMDE in 1.14 but since that change can't be backported to 1.13 we will just disable the editor on mobile here. * make isMobile function per code review -- disable simpleMDE for code review and replies * Fix issue with plain text and wiki Co-authored-by: silverwind <me@silverwind.io>
* Add emoji in label to project boards (#13978) (#14021)65432020-12-161-1/+1
| | | | | | | | | | | | * Update view.tmpl Added rendering of emoji to project label * Add RenderEmojiPlain to the title and remove has-emoji Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: Rakshith Ravi <rakshith.ravi@gmx.com> Co-authored-by: zeripath <art27@cantab.net>
* Send webhook when tag is removed via Web UI (#14015) (#14019)Cirno the Strongest2020-12-161-0/+4
| | | | | | | * Send webhook when tag is removed via Web UI * Stray code (cherry picked from commit 53308de0bf6880798666a98cbc2df6c7be527f50) * Fix for 1.13
* always use headCommitID for review comment diff (#14011)Jimmy Praet2020-12-161-7/+7
|
* Trim the branch prefix from action.GetBranch (#13981) (#13986)zeripath2020-12-141-1/+2
| | | | | | | | | | | | | | | | Backport #13981 #13882 has revealed that the refname of an action is actually only a refname pattern and necessarily a branch. For examplem pushing to refs/heads/master will result in action with refname refs/heads/master but pushing to master will result in a refname master. The simplest solution to providing a fix here is to trim the prefix therefore this PR proposes this. Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: a1012112796 <1012112796@qq.com> Co-authored-by: a1012112796 <1012112796@qq.com>
* Ensure template renderer is available before storage handler (#13982)zeripath2020-12-141-1/+2
| | | | | | | | | | | `ctx.Error` requires that templates are available for this to render the error page otherwise there will be a panic at this time. This was fixed in #13164 but was not completely backported. Fix #13971 Signed-off-by: Andrew Thornton <art27@cantab.net>
* Whenever the password is updated ensure that the hash algorithm is too ↵zeripath2020-12-133-4/+4
| | | | | | | | | | | | | | | (#13966) (#13967) Backport #13966 `user.HashPassword` may potentially - and in fact now likely does - change the `passwd_hash_algo` therefore whenever the `passwd` is updated, this also needs to be updated. Fix #13832 Thanks @fblaese for the hint Signed-off-by: Andrew Thornton <art27@cantab.net>
* Enforce setting HEAD in wiki to master (#13950) (#13961)65432020-12-121-0/+2
| | | | | | | | | | | | The default branch in wikis must be master - therefore forcibly set the HEAD to master. Fix #13846 Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: zeripath <art27@cantab.net>
* Fix feishu webhook caused by API changed (#13937) (#13938)Lunny Xiao2020-12-111-55/+33
| | | fix #13858