mirror of
1
Fork 0
forgejo/routers/api/v1/repo
Gusted 77db7655e0
fix(sec): web route update and delete runner variables
The web route to update and delete variables of runners did not check if
the ID that was given belonged to the context it was requested in, this
made it possible to update and delete every existing runner variable of
a instance for any authenticated user.

The code has been reworked to always take into account the context of
the request (owner and repository ID).
2025-02-08 06:04:14 +00:00
..
action.go fix(sec): web route update and delete runner variables 2025-02-08 06:04:14 +00:00
avatar.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
blob.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
branch.go Implement update branch API (#32433) 2024-12-15 09:24:31 +01:00
collaborators.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
commits.go Return 404 instead of error when commit not exist (#31977) 2024-09-09 20:54:47 +02:00
compare.go Enable `unparam` linter (#31277) 2024-06-16 13:42:58 +02:00
download.go Add github compatible tarball download API endpoints (#32572) 2024-12-03 10:19:22 +01:00
file.go Add github compatible tarball download API endpoints (#32572) 2024-12-03 10:19:22 +01:00
flags.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
fork.go fix: don't show private forks in forks list 2024-11-15 10:59:36 +01:00
git_hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
git_ref.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
hook_test.go [TESTS] Fix usage of `LoadRepoCommit` 2024-08-26 08:03:48 +02:00
issue.go API: enhance SearchIssues swagger docs (#32208) 2024-10-20 09:44:18 +02:00
issue_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_comment.go Load attachments for `/issues/comments/{id}` 2024-07-16 11:09:54 +02:00
issue_comment_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_dependency.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_label.go Support org labels when adding labels by label names (#32988) 2024-12-30 08:26:54 +00:00
issue_pin.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_reaction.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_stopwatch.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
issue_subscription.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
issue_tracked_time.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
key.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
label.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
language.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
migrate.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
milestone.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
mirror.go [FIX] Don't allow SSH authentication without ssh executable 2024-08-26 08:58:35 +02:00
notes.go [FEAT]Allow changing git notes (#4753) 2024-11-18 22:56:17 +00:00
patch.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
pull.go fmt 2024-11-16 18:12:40 +01:00
pull_review.go Fix the logic of finding the latest pull review commit ID (#32139) 2024-10-06 07:44:28 +02:00
release.go feat: Add Search to Releases Page 2024-11-02 10:24:35 +01:00
release_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
release_tags.go Protected tag is no internal server error (#30962) 2024-05-19 13:12:35 +02:00
repo.go feat: allow changing default branch update style 2024-12-23 18:55:25 +03:00
repo_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
star.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
status.go Cache repository default branch commit status to reduce query on commit status table (#29444) 2024-03-11 23:36:58 +07:00
subscriber.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
tag.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
teams.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
topic.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
transfer.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
tree.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
wiki.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00