forgejo-11-secure/models/user
Mathieu Fenniak a32151caf6 [v11.0/forgejo]: 2026-06-10 security patches (#13003)
- fix: LFS locks must belong to the intended repo, port from Gitea
- fix: prevent unauthorized access to draft releases via API
- fix: prevent writes to OpenID visibility which may affect other users
- fix: prevent viewing private PRs that are linked to public issues on public projects

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13003
Reviewed-by: Beowulf <beowulf@beocode.eu>
2026-06-10 06:02:41 +02:00
..
fixtures Implement remote user login source and promotion to regular user 2024-04-25 13:03:49 +02:00
avatar.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
avatar_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
badge.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
block.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
block_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
email_address.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
email_address_test.go [v11.0/forgejo] fix: user activation with uppercase email address (#8385) 2025-07-02 14:09:24 +02:00
error.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
external_login_user.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
federated_user.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
federated_user_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
follow.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
follow_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
list.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
main_test.go [v11.0/forgejo] chore: merge tests.AddFixtures and unittest.OverrideFixtures (#7649) 2025-04-25 09:59:30 +00:00
must_change_password.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
openid.go [v11.0/forgejo]: 2026-06-10 security patches (#13003) 2026-06-10 06:02:41 +02:00
openid_test.go [v11.0/forgejo]: 2026-06-10 security patches (#13003) 2026-06-10 06:02:41 +02:00
redirect.go [v11.0/forgejo] fix: only redirect to a new owner (organization or user) if the user has permissions to view the new owner (#9089) 2025-08-30 18:52:43 +02:00
search.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
setting.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
setting_keys.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
setting_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
user.go [v11.0/forgejo] fix: allow unactivated users to send recovery mails (#9516) 2025-10-03 09:50:03 +02:00
user_repository.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
user_system.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
user_test.go [v11.0/forgejo] fix: allow unactivated users to send recovery mails (#9516) 2025-10-03 09:50:03 +02:00
user_update.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00