mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity
forgejo/public/.well-known/security.txt

6 lines
252 B
Plaintext
Raw Normal View History

[GITEA] add /.well-known/security.txt endpoint resolves #38 adds RFC 9116 machine parsable File Format to Aid in Security Vulnerability Disclosure (cherry picked from commit 8ab1f8375c695867524f30a23bc36d805936a76d) (cherry picked from commit 8f04f0e28867bf49ebf1dff6989f06fe6dd07fd7) (cherry picked from commit 5ced68a7a002e720ec0841c8ee79818dc37e225e) (cherry picked from commit 437c5dd7494052ee86b3a5d66a40852fb1e45583) Conflicts: 52fb9367734100847249d074e2bc17f2aa91053e Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
2023-06-27 02:43:33 +02:00
Contact: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/CONTRIBUTING.md
Contact: mailto:security@forgejo.org
Expires: 2025-06-25T00:00:00Z
Policy: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/CONTRIBUTING.md
Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974) Replace #25892 Close #21942 Close #25464 Major changes: 1. Serve "robots.txt" and ".well-known/security.txt" in the "public" custom path * All files in "public/.well-known" can be served, just like "public/assets" 3. Add a test for ".well-known/security.txt" 4. Simplify the "FileHandlerFunc" logic, now the paths are consistent so the code can be simpler 5. Add CORS header for ".well-known" endpoints 6. Add logs to tell users they should move some of their legacy custom public files ``` 2023/07/19 13:00:37 cmd/web.go:178:serveInstalled() [E] Found legacy public asset "img" in CustomPath. Please move it to /work/gitea/custom/public/assets/img 2023/07/19 13:00:37 cmd/web.go:182:serveInstalled() [E] Found legacy public asset "robots.txt" in CustomPath. Please move it to /work/gitea/custom/public/robots.txt ``` This PR is not breaking. --------- Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Giteabot <teabot@gitea.io>
2023-07-21 14:14:20 +02:00
Preferred-Languages: en