Gusted 77db7655e0 fix(sec): web route update and delete runner variables ... The web route to update and delete variables of runners did not check if the ID that was given belonged to the context it was requested in, this made it possible to update and delete every existing runner variable of a instance for any authenticated user. The code has been reworked to always take into account the context of the request (owner and repository ID).		2025-02-08 06:04:14 +00:00
..
action.go	fix(sec): web route update and delete runner variables	2025-02-08 06:04:14 +00:00
avatar.go	Fix bug on avatar (#31008)	2024-05-19 13:57:52 +02:00
hook.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
label.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
member.go	Calculate `PublicOnly` for org membership only once (#32234)	2024-11-17 21:57:34 +01:00
org.go	Merge pull request 'Improve Swagger documentation for user endpoints' (#6050) from JakobDev/forgejo:userswagger into forgejo	2024-11-28 20:42:19 +00:00
quota.go	feat(quota): Humble beginnings of a quota engine	2024-08-02 11:10:34 +02:00
team.go	Improve Swagger documentation for user endpoints	2024-11-23 10:33:55 +01:00