mirror of
https://github.com/VibedByKaKi/forgejo-11-secure.git
synced 2026-10-14 22:38:06 +02:00
a32151caf6
- fix: LFS locks must belong to the intended repo, port from Gitea - fix: prevent unauthorized access to draft releases via API - fix: prevent writes to OpenID visibility which may affect other users - fix: prevent viewing private PRs that are linked to public issues on public projects Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13003 Reviewed-by: Beowulf <beowulf@beocode.eu> |
||
|---|---|---|
| .. | ||
| locks.go | ||
| server.go | ||
| server_test.go | ||