Gusted ce0a376723 fix: check that attachments belong to correct resource ... It was possible to hijack attachments during update and create functions to another owner as permissions to check they weren't already attached to another resource and wasn't checked if it belonged to the repository that was being operated on.		2026-03-06 11:21:07 -07:00
..
admin	feat: render a link to poster profile next to the ID within shadow copy details (#10194)	2025-12-09 15:19:10 +01:00
auth	fix: verify code challenge of S256	2026-03-06 11:21:07 -07:00
demo	chore(ui): change /devtest to /-/demo (#11019)	2026-01-26 13:12:25 +01:00
events	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
explore	refactor: replace Value() from Option[T] with Get() & ValueOrZeroValue() (#11218)	2026-02-10 16:41:21 +01:00
feed	fix: use an absolute URL for compare links in atom feed (#10933)	2026-02-01 10:00:21 +01:00
healthcheck	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
misc	Move web app manifest to a own cache-able route and add a setting to set "display": "standalone"; Closes #2638 (#5384)	2026-01-09 17:49:29 +01:00
moderation	feat!: Abusive content reporting (#6977)	2025-05-18 08:05:16 +00:00
org	refactor: replace Value() from Option[T] with Get() & ValueOrZeroValue() (#11218)	2026-02-10 16:41:21 +01:00
repo	fix: check that attachments belong to correct resource	2026-03-06 11:21:07 -07:00
shared	i18n(*): migrate 92 strings to json (#11325)	2026-02-16 17:38:56 +01:00
user	feat: backend DB model for fine-grained repo access tokens	2026-02-27 17:17:29 +01:00
base.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
githttp.go	feat: replace cross origin protection (#9830)	2025-10-29 22:43:22 +01:00
goget.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
home.go	feat: Global 2FA enforcement (#8753)	2025-08-15 10:56:45 +02:00
metrics.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
nodeinfo.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
swagger_json.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
web.go	chore(ui): change /devtest to /-/demo (#11019)	2026-01-26 13:12:25 +01:00
webfinger.go	fix: trim trailing slash in WebFinger OIDC issuer link (#8794)	2025-08-06 14:50:51 +02:00