jojo/services/attachment
Gusted f488689c47 fix: check that attachments belong to correct resource
It was possible to hijack attachments during update and create functions
to another owner as permissions to check they weren't already attached
to another resource and wasn't checked if it belonged to the repository
that was being operated on.
2026-03-06 11:20:50 -07:00
..
attachment.go fix: check that attachments belong to correct resource 2026-03-06 11:20:50 -07:00
attachment_test.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00