0
0
mirror of https://github.com/go-gitea/gitea.git synced 2026-04-04 23:10:38 +02:00

6 Commits

Author SHA1 Message Date
☙◦ The Tablet ❀ GamerGirlandCo ◦❧
2cbb62c302
revert: fixture and test changes
give all existing fixture repos a group id of 0
2026-04-02 20:15:17 -04:00
☙◦ The Tablet ❀ GamerGirlandCo ◦❧
3f4345abf6
update integration test utilities to tage group id as argument 2026-04-02 20:14:23 -04:00
☙◦ The Tablet ❀ GamerGirlandCo ◦❧
07d8bd7885
revert: fixture and test changes
give all existing fixture repos a group id of 0
2026-04-02 20:01:13 -04:00
☙◦ The Tablet ❀ GamerGirlandCo ◦❧
6f885a149e
update integration test utilities to tage group id as argument 2026-04-02 20:01:00 -04:00
silverwind
42d294941c
Replace CSRF cookie with CrossOriginProtection (#36183)
Removes the CSRF cookie in favor of
[`CrossOriginProtection`](https://pkg.go.dev/net/http#CrossOriginProtection)
which relies purely on HTTP headers.

Fixes: https://github.com/go-gitea/gitea/issues/11188
Fixes: https://github.com/go-gitea/gitea/issues/30333
Helps: https://github.com/go-gitea/gitea/issues/35107

TODOs:

- [x] Fix tests
- [ ] Ideally add tests to validates the protection

---------

Signed-off-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2025-12-25 12:33:34 +02:00
Zettat123
cdc0733047
Use inputs context when parsing workflows (#35590)
Depends on [gitea/act#143](https://gitea.com/gitea/act/pulls/143)

The [`inputs`
context](https://docs.github.com/en/actions/reference/workflows-and-actions/contexts#inputs-context)
is used when parsing workflows so that `run-name` like `run-name: Deploy
to ${{ inputs.deploy_target }}` can be parsed correctly.
2025-10-06 06:09:27 +02:00