wxiaoguang 15b23f037d

Fix attachment Content-Security-Policy (#37455) ...

See the comments. Others are not changed, only added a new rule for
medias: `serveHeaderCspMedia`

---------

Co-authored-by: Giteabot <teabot@gitea.io>

2026-04-28 01:29:09 +00:00

..

actions

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

analyze

…

assetfs

Fix theme discovery and Vite dev server in dev mode (#37033)

2026-03-30 14:59:10 +00:00

auth

Update Go dependencies (#36781)

2026-04-01 11:26:52 +08:00

avatar

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

badge

…

base

Fix incorrect setting loading order (#36735)

2026-02-24 23:46:08 +08:00

cache

…

cachegroup

…

charset

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

commitstatus

Update Combine method to treat warnings as failures and adjust tests (#37048)

2026-03-31 17:22:18 +00:00

container

…

csv

…

dump

fix: dump with default zip type produces uncompressed zip (#37401)

2026-04-24 14:35:15 +08:00

emoji

…

eventsource

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

fileicon

…

generate

Remove error returns from crypto random helpers and callers (#37240)

2026-04-17 00:59:26 +08:00

git

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

gitrepo

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

glob

…

globallock

…

graceful

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

gtprof

…

hcaptcha

Clean up Makefile, tests and legacy code (#36638)

2026-02-19 01:23:32 +00:00

highlight

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

hostmatcher

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

htmlutil

…

httpcache

Refactor avatar package, support default avatar fallback (#36788)

2026-03-01 13:32:35 +00:00

httplib

Fix attachment Content-Security-Policy (#37455)

2026-04-28 01:29:09 +00:00

indexer

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

issue/template

…

json

Fix corrupted JSON caused by goccy library (#37214)

2026-04-14 14:00:20 +00:00

label

…

lfs

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

lfstransfer

Correct spelling (#36783)

2026-02-28 11:23:20 -08:00

log

…

markup

refactor: serve site manifest via /assets/site-manifest.json endpoint (#37405)

2026-04-24 13:00:59 +00:00

mcaptcha

…

metrics

…

migration

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

nosql

…

optional

Fix API not persisting pull request unit config when has_pull_requests is not set (#36718)

2026-03-02 22:08:53 +00:00

options

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

packages

Swift registry metadata: preserve more JSON fields and accept empty metadata (#37254)

2026-04-18 04:16:26 +08:00

paginator

…

pprof

…

private

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

process

…

proxy

…

proxyprotocol

…

public

Use MarkLongPolling instead of hard-coded route path (#37427)

2026-04-26 11:42:29 +00:00

queue

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

recaptcha

Fix URLJoin, markup render link reoslving, sign-in/up/linkaccount page common data (#36861)

2026-03-08 15:57:37 +00:00

references

…

regexplru

…

repository

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

reqctx

…

secret

…

session

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

setting

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

sitemap

…

ssh

…

storage

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

structs

Add API endpoint to reply to pull request review comments (#36683)

2026-04-27 08:45:59 +00:00

svg

Add render cache for SVG icons (#36863)

2026-03-10 05:26:16 +00:00

system

…

tailmsg

…

tempdir

…

templates

Fix URL related escaping for oauth2 (#37334)

2026-04-21 23:58:32 +08:00

test

Add form-fetch-action to some forms, fix "fetch action" resp bug (#37305)

2026-04-20 18:58:44 +00:00

testlogger

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

timeutil

Clean up Makefile, tests and legacy code (#36638)

2026-02-19 01:23:32 +00:00

translation

Fix various trivial problems (#36953)

2026-03-23 18:23:42 +00:00

turnstile

…

typesniffer

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

updatechecker

…

uri

…

user

…

util

Fix repo init README EOL (#37388)

2026-04-23 18:33:16 +00:00

validation

Support for Custom URI Schemes in OAuth2 Redirect URIs (#37356)

2026-04-22 21:33:27 +00:00

web

Use MarkLongPolling instead of hard-coded route path (#37427)

2026-04-26 11:42:29 +00:00

webhook

actions: report commit status for pull_request_review events (#36589)

2026-02-20 16:12:22 +00:00

zstd

…