Gusted a4642af51a feat: replace cross origin protection (#9830) ... Replace the anti-CSRF token with a [cross origin protection by Go](https://go.dev/doc/go1.25#nethttppkgnethttp) that uses a stateless way of verifying if a request was cross origin or not. This allows is to remove al lot of code and replace it with a few lines of code and we no longer have to hand roll this protection. The new protection uses indicators by the browser itself that indicate if the request is cross-origin, thus we no longer have to take care of ensuring the generated CSRF token is passed back to the server any request by the the browser will have send this indicator. Resolves forgejo/forgejo#3538 Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9830 Reviewed-by: oliverpool <oliverpool@noreply.codeberg.org> Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org> Co-authored-by: Gusted <postmaster@gusted.xyz> Co-committed-by: Gusted <postmaster@gusted.xyz>		2025-10-29 22:43:22 +01:00
..
config	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
actions.go	feat: implement "concurrency" block in Forgejo Actions at the workflow level (#9434)	2025-10-03 18:43:02 +02:00
actions_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
admin.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
admin_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
api.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
asset_dynamic.go
asset_static.go
attachment.go	feat: Make AVIF Images work with Forgejo	2024-11-13 19:09:40 +01:00
attachment_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
badges.go	[GITEA] Add support for shields.io-based badges	2024-02-05 16:09:42 +01:00
cache.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
camo.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
config.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
config_env.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
config_env_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
config_provider.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
config_provider_test.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
cors.go	Fix settings not being loaded at CLI (#26402)	2025-01-05 12:13:48 +00:00
cron.go
cron_test.go	fix: LFS GC is never running because of a bug in the parsing of the INI file (#9202)	2025-09-09 22:32:49 +02:00
database.go	fix: add missing loadbalancing policies for EngineGroup connections (#7799)	2025-05-14 01:17:57 +00:00
database_sqlite.go
database_test.go	feat: use XORM EngineGroup instead of single Engine connection (#7212)	2025-03-30 11:34:02 +00:00
disposable_email_domain_data.go	feat: add setting to block disposable emails	2024-11-20 23:17:37 -06:00
f3.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
federation.go	feat(activitiypub): enable HTTP signatures on all ActivityPub endpoints (#7035)	2025-04-03 15:24:15 +00:00
forgejo_storage_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
git.go	chore: remove two Git settings (#9815)	2025-10-23 00:38:47 +02:00
git_test.go	chore: QoL improvements to tests (#7917)	2025-05-21 15:45:56 +02:00
highlight.go
i18n.go	fix(UI): i18n: improve naming (#7539)	2025-04-15 05:48:19 +00:00
incoming_email.go	feat: add _URI entries for mail config (#8116)	2025-07-09 23:15:26 +02:00
incoming_email_test.go	feat: add _URI entries for mail config (#8116)	2025-07-09 23:15:26 +02:00
indexer.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
indexer_test.go	Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.5.0 (forgejo) (#9563)	2025-10-08 13:15:33 +02:00
lfs.go	chore(sec): unify usage of crypto/rand.Read (#7453)	2025-04-04 03:31:37 +00:00
lfs_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
log.go	feat(log): better parseable and configurable ssh-logs (#9056)	2025-09-11 18:59:24 +02:00
log_test.go	feat(log): better parseable and configurable ssh-logs (#9056)	2025-09-11 18:59:24 +02:00
mailer.go	feat: add _URI entries for mail config (#8116)	2025-07-09 23:15:26 +02:00
mailer_test.go	feat: add _URI entries for mail config (#8116)	2025-07-09 23:15:26 +02:00
markup.go	Set MERMAID_MAX_SOURCE_CHARACTERS to 50000 (#34152)	2025-04-14 15:47:37 +02:00
metrics.go
migrations.go
mime_type_map.go
mirror.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
moderation.go	feat: add configurable timeout for automatically removing resolved reports (#7940)	2025-07-28 14:52:13 +02:00
oauth2.go	chore(sec): unify usage of crypto/rand.Read (#7453)	2025-04-04 03:31:37 +00:00
oauth2_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
other.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
packages.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
packages_test.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
path.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
path_test.go
picture.go
project.go
proxy.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
queue.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
quota.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
quota_test.go	fix: [quota.default].TOTAL config setting supports unit suffixes (#9252)	2025-09-12 00:44:09 +02:00
repository.go	feat: configurable default units for mirrors (#7902)	2025-06-03 08:12:29 +02:00
repository_archive.go
repository_archive_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
repository_test.go	feat(sec): Add SSH signing support for instances (#6897)	2025-04-11 13:25:35 +00:00
security.go	feat: replace cross origin protection (#9830)	2025-10-29 22:43:22 +01:00
server.go	fix: use correct ACME default (#8550)	2025-07-17 20:40:09 +02:00
server_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
service.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
service_test.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
session.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
setting.go	feat: add configurable timeout for automatically removing resolved reports (#7940)	2025-07-28 14:52:13 +02:00
setting_test.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
ssh.go	feat: enable mlkem768x25519-sha256 by default for builtin ssh (#8115)	2025-06-09 14:34:15 +02:00
storage.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
storage_test.go	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
task.go
time.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
ui.go	chore: remove not working PREFERRED_TIMESTAMP_TENSE setting (#9490)	2025-10-01 15:16:01 +02:00
webhook.go	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00