routers/user: ensure that decryption of cookie actually suceeds (#7363)
Previously, only the first return value of ctx.GetSuperSecureCookie
was used to check whether decryption of the auth cookie succeeded.
ctx.GetSuperSecureCookie also returns a second value, a boolean,
indicating success or not. That value should be checked first to
be on the safe side and not rely on internal logic of the encryption
and decryption blackbox.
* workaround broken swagger
only master brach is not working, latest release seems to work
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* make vendor
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* Don't export GO111MODULE
* set go-swagger to fixed release version
mentioned here: https://github.com/go-gitea/gitea/pull/7362#discussion_r300831537
Signed-off-by: Michael Gnehr <michael@gnehr.de>
- ran `make npm-update`
- ran `make js`, fixed new lint issue
- ran `make css`, this added back some vendor prefixes
- added `engines` property to package.json to specify minimum required
Node.js version
- added `private` property to package.json to prevent accidential
publishing to npm
* Experimental support for git commit graph files and bloom filter index
Signed-off-by: Filip Navara <filip.navara@gmail.com>
* Force vendor of commitgraph
Signed-off-by: Filip Navara <filip.navara@gmail.com>
* Remove bloom filter experiment and debug prints
* Remove old code for building commit graphs
* Remove unused function
* Remove mmap usage
* gofmt
* sort vendor/modules.txt
* Add copyright header and log commit-graph error
#6946 Run hooks on merge/edit and cope with protected branches (#6961)
* Fix #6946 by checking PullRequest ID on pushing
* Ensure we have the owner name, the pr attributes and the the issue
* Fix TestSearchRepo by waiting till indexing is done
* Update integrations/repo_search_test.go
* changes as per @mrsdizzie
* missing comma
* Spelling mistake
* Fix full pushing environment
* chore: update drone format to 1.0
* Converted old drone config
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Moved translations to seperate pipeline
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Split the steps in multiple pipelines and add dependencies
Signed-off-by: konrad <konrad@kola-entertainments.de>
* format
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed step depenednecies
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed discord notify
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Exclude translations and docs pipelines from prs
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed exclude prs
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed exclude prs
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Moved releases to seperate pipeline
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Re-trigger drone
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Disable release step
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed depending step
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Adopted dependencies
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Changed pipeline conditions
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Replaced pipeline conditions with triggers
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed coverage step
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Import changes from #7331
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Add comment for lowest go version
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Exclude fetch-tags from prs
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Re-added comment about no tags
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Removed unneeded conditions
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Moved release version and release latest to different pipelines
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Fixed depending pipeline
Signed-off-by: konrad <konrad@kola-entertainments.de>
* Removed the conditions for all services
Signed-off-by: konrad <konrad@kola-entertainments.de>
* - do not select if escape is pressed
- allow prefixes by adding current request content to result list
- remove html-tags before insert on page
fix #7126
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* sort current query to top
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* remove already added topics from dropdown list
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* protoct against xss
thanks to @silverwind
Signed-off-by: Michael Gnehr <michael@gnehr.de>
Fix 7303 - remove unnessesary buttons on archived repos (#7326)
* archived repo - remove
- open/close button on issue list
- assigne person on issue list
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* archived repo - remove
- comment field on issue view
- lock/unlock issue conversation button from sidebar on issue view
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* archived repo - add 'compare commits' button to pull request
+ remove new pull request button from compare view
as the route is still working, and there is no need to be hidden
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* add dark theme for jquery xdsoft_datetimepicker
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* add border to dark theme - not checked issue checkboxes
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* modify dark codemirror theme
fix #6573
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* add selection color
Signed-off-by: Michael Gnehr <michael@gnehr.de>
Show Pull Request button or status of latest PR in branch list (#6990)
* Show Pull Request button or status of latest PR in branch list
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Do not show pull request button on deleted branches
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Do not show commit divergence on deleted branches
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Use XORMs Get instead of limit
* Links pull request ID and use smaller labels for displaying the pull request status
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Handle error when getting latest pull request
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Indent template
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
* Check error when loading issue
Signed-off-by: Mario Lubenka <mario.lubenka@googlemail.com>
New CSS linter which is much more powerfull than the previous one.
Configuration is default but I had to remove a few rules that were
throwing too many or weird errors.
More importantly, the linter will exit with code 1 on errors so now our
build will fail if the CSS linter fails which should eliminate linter
errors being introduced without notice.
fix extra newlines when copying from diff in Firefox (#7288)
* fix extra newlines when copying from diff
See https://bugzilla.mozilla.org/show_bug.cgi?id=1273836
Basically, the <pre><code> seems to add a forced newline that is not
possible to get rid of via CSS, so I replaced it with just a <code>.
Secondly, .lines-type-marker also forced a newline in the copied text,
but that was possible to get rid of via user-select.
Safari still has a extraneous newline in the copied text of unknown
origin, but this should not block stop this PR.
* simplify .line-type-marker
* fix selector
* remove erronous ^^^
* Fix empty split diff
* Fix arc-theme-green
* fix add comment
* ensure line-num is copied too
* Update templates/repo/diff/box.tmpl
Co-Authored-By: zeripath <art27@cantab.net>
* attempt to fix safari via removing <code>
* remove useless whitespace at the end of 'class'
* remove inter-tag whitespace for code <td>s
* more inter-tag removal
* final inter-tag removal
* attempt to fix empty line copy
* move and comment getLineContent
* fix golint
* make background grey for missing added code
* Make diff line-marker non-selectable
* Move to use data-* as per @mrsdizzie
* fix missing line nums
* Add a minimum-width to force right-align of the line num
* Move line-type-marker into separate column
Fix #732: Add LFS objects to base repository on merging (#7082)
On merge we walk the merge history and ensure that all lfs objects pointed to in
the history are added to the base repository. This switches from relying on having git-lfs installed on the server, (and in fact .gitattributes being correctly installed.)
* fix colors in dark theme - tables inside rendered markdown
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* fix colors in dark theme - simpleMDE rendered preview
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* Update public/less/themes/arc-green.less
remove scroll bar color, to add this globally on additional PR
Co-Authored-By: Lauris BH <lauris@nix.lv>
Signed-off-by: Michael Gnehr <michael@gnehr.de>
* add missing class name
Signed-off-by: Michael Gnehr <michael@gnehr.de>
AJ ONeal
Lunny Xiao
leonklingele
Cherrg
techknowlogick
silverwind
Antoine GIRARD
Filip Navara
zeripath
Bo-Yi Wu
GiteaBot
Alexandru Bucur
Richard Mahn
Mario Lubenka
Marat Radchenko
mrsdizzie
techknowlogick