Gusted f488689c47 fix: check that attachments belong to correct resource ... It was possible to hijack attachments during update and create functions to another owner as permissions to check they weren't already attached to another resource and wasn't checked if it belonged to the repository that was being operated on.		2026-03-06 11:20:50 -07:00
..
actions	[v11.0/forgejo] fix(test): TestActionsArtifactOverwrite needs ordered query for pgsql (#8848)	2025-08-10 15:14:06 +02:00
activities	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
admin	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
asymkey	fix: use correct GPG key for export	2026-01-06 11:07:10 -07:00
auth	fix(sec): consider webauthn for external login	2025-05-02 07:31:20 +02:00
avatars	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
db	[v11.0/forgejo] fix: add forgejo doctor cleanup-commit-status command (#10686) (#10783)	2026-01-13 16:17:06 +01:00
dbfs	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
fixtures	fix: hide user profile anonymous options on public repo APIs	2026-01-06 10:44:07 -07:00
forgefed	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
forgejo/semver	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
forgejo_migrations	[v11.0/forgejo] fix: strict error handling on corrupted DB migration tracking tables (#9775)	2025-10-20 19:13:47 +02:00
git	[v11.0/forgejo] fix: add forgejo doctor cleanup-commit-status command (#10686) (#10783)	2026-01-13 16:17:06 +01:00
issues	fix: check that attachments belong to correct resource	2026-03-06 11:20:50 -07:00
migrations	Update golang packages to v1.25 (v11.0/forgejo) (minor) (#9821)	2025-10-23 20:12:49 +02:00
organization	[v11.0/forgejo] fix: show membership of limited orgs (#8095)	2025-06-07 01:59:55 +02:00
packages	[v11.0/forgejo] chore: merge tests.AddFixtures and unittest.OverrideFixtures (#7649)	2025-04-25 09:59:30 +00:00
perm	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
project	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
pull	[v11.0/forgejo] fix: do not ignore automerge while a PR is checking for conflicts (#8456)	2025-07-09 14:09:12 +02:00
quota	[v11.0/forgejo] fix: ignore expired artifacts for quota calculation (#7985)	2025-05-28 19:00:00 +02:00
repo	fix: check that attachments belong to correct resource	2026-03-06 11:20:50 -07:00
secret	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
shared/types	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
system	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
unit	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
unittest	[v11.0/forgejo] chore: replace github.com/go-testfixtures/testfixtures (#7729)	2025-04-30 13:21:04 +00:00
user	[v11.0/forgejo] fix: allow unactivated users to send recovery mails (#9516)	2025-10-03 09:50:03 +02:00
webhook	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
error.go	[v11.0/forgejo] fix: don't allow credentials in migrate/push mirror URL (#9065)	2025-08-30 18:53:14 +02:00
main_test.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
org.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
org_team.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
org_team_test.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
org_test.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
repo.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
repo_test.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
repo_transfer.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00
repo_transfer_test.go	[v11.0/forgejo] chore: branding import path (#7354)	2025-03-27 20:13:05 +00:00