Unknwon 3a30c06345 Fix wiki vulnerabilities ...

- Arbitrary file creation leading to command execution
- .md file creation/deletion

Reported by Gabriel Campana.

2016-07-01 15:33:35 +08:00

..

migrations

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

access.go

#1692 api: admin list and create team under organization

2016-03-21 12:47:54 -04:00

action.go

Fix capitalisation of repo-name in news (#3203)

2016-06-27 16:10:12 +08:00

admin.go

Add comment note (#3093)

2016-05-23 13:24:40 -07:00

error.go

Fixes #3110 (#3136)

2016-06-27 17:02:39 +08:00

git_diff_test.go

…

git_diff.go

Re-work MAX_DIFF_LINES: supress diff per file, not the whole diff (#3174)

2016-06-29 23:11:00 +08:00

issue_comment.go

Updated and created were appended with _unix. Fresh databases have only the newly named fields.

2016-03-11 12:43:35 +01:00

issue_label.go

…

issue.go

Fix #3154 (#3155)

2016-06-27 16:58:53 +08:00

login.go

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

models_sqlite.go

…

models_tidb.go

…

models.go

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

org_team.go

#1692 add admin APIs to add/remove a user from teams

2016-03-25 18:04:02 -04:00

org.go

Fix listing team members (#3048)

2016-05-06 20:02:36 -04:00

pull.go

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

release.go

models/release: filter input to prevent command line argument vulnerability

2016-05-06 15:40:41 -04:00

repo_branch.go

…

repo_collaboration.go

Localize collaboration settings. (#3100)

2016-06-28 00:22:30 +08:00

repo_test.go

Support alphanumeric issue style (ABC-1234) for external issue tracker (#2992)

2016-04-22 18:28:08 -04:00

repo.go

Fix negative issue count (#3207)

2016-06-27 01:53:30 +08:00

ssh_key_test.go

…

ssh_key.go

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

token.go

Fixes #3110 (#3136)

2016-06-27 17:02:39 +08:00

update.go

…

user.go

Use a gopher as default avatar (rather than the gravatar logo) (#3208)

2016-06-27 18:12:30 +08:00

webhook_slack.go

…

webhook.go

#2302 Replace time.Time with Unix Timestamp (int64)

2016-03-09 19:53:30 -05:00

wiki.go

Fix wiki vulnerabilities

2016-07-01 15:33:35 +08:00