mirror of
1
Fork 0
forgejo/models
Unknwon 3a30c06345 Fix wiki vulnerabilities
- Arbitrary file creation leading to command execution
- .md file creation/deletion

Reported by Gabriel Campana.
2016-07-01 15:33:35 +08:00
..
migrations #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
access.go #1692 api: admin list and create team under organization 2016-03-21 12:47:54 -04:00
action.go Fix capitalisation of repo-name in news (#3203) 2016-06-27 16:10:12 +08:00
admin.go Add comment note (#3093) 2016-05-23 13:24:40 -07:00
error.go Fixes #3110 (#3136) 2016-06-27 17:02:39 +08:00
git_diff.go Re-work MAX_DIFF_LINES: supress diff per file, not the whole diff (#3174) 2016-06-29 23:11:00 +08:00
git_diff_test.go go fmt models/git_diff_test.go 2016-02-04 17:55:17 -02:00
issue.go Fix #3154 (#3155) 2016-06-27 16:58:53 +08:00
issue_comment.go Updated and created were appended with _unix. Fresh databases have only the newly named fields. 2016-03-11 12:43:35 +01:00
issue_label.go Minor fix for #2710 2016-02-27 11:31:24 -05:00
login.go #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
models.go #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
models_sqlite.go go vet 2014-04-13 03:14:43 -04:00
models_tidb.go add tidb support 2015-09-12 15:31:36 -04:00
org.go Fix listing team members (#3048) 2016-05-06 20:02:36 -04:00
org_team.go #1692 add admin APIs to add/remove a user from teams 2016-03-25 18:04:02 -04:00
pull.go #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
release.go models/release: filter input to prevent command line argument vulnerability 2016-05-06 15:40:41 -04:00
repo.go Fix negative issue count (#3207) 2016-06-27 01:53:30 +08:00
repo_branch.go Minor fix for #2506 2016-02-02 17:07:40 -05:00
repo_collaboration.go Localize collaboration settings. (#3100) 2016-06-28 00:22:30 +08:00
repo_test.go Support alphanumeric issue style (ABC-1234) for external issue tracker (#2992) 2016-04-22 18:28:08 -04:00
ssh_key.go #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
ssh_key_test.go Post work for #2637 2016-02-27 20:48:39 -05:00
token.go Fixes #3110 (#3136) 2016-06-27 17:02:39 +08:00
update.go #2650 fix possbility that use email as pusher user name 2016-02-17 22:47:06 -05:00
user.go Use a gopher as default avatar (rather than the gravatar logo) (#3208) 2016-06-27 18:12:30 +08:00
webhook.go #2302 Replace time.Time with Unix Timestamp (int64) 2016-03-09 19:53:30 -05:00
webhook_slack.go rename import path 2015-12-15 17:25:45 -05:00
wiki.go Fix wiki vulnerabilities 2016-07-01 15:33:35 +08:00