Kemal Zebari 7adc4717ec Include file extension checks in attachment API (#32151) ... From testing, I found that issue posters and users with repository write access are able to edit attachment names in a way that circumvents the instance-level file extension restrictions using the edit attachment APIs. This snapshot adds checks for these endpoints.		2024-11-06 21:34:32 +00:00
..
upload	Include file extension checks in attachment API (#32151)	2024-11-06 21:34:32 +00:00
access_log.go
api_org.go
api_test.go
api.go	Refactor RepoRefByType (#32413)	2024-11-05 06:35:54 +00:00
base_test.go
base.go	Refactor names (#31405)	2024-06-19 06:32:45 +08:00
captcha.go	Refactor cache and disable go-chi cache (#30417)	2024-04-13 08:38:44 +00:00
context_cookie.go
context_model.go
context_request.go
context_response.go	Refactor AppURL usage (#30885)	2024-05-07 08:26:13 +00:00
context_template.go
context_test.go	Refactor external URL detection (#29973)	2024-03-22 04:32:40 +08:00
context.go	Refactor template ctx and render utils (#32422)	2024-11-05 14:04:26 +08:00
csrf.go	Refactor CSRF token (#32216)	2024-10-10 03:48:21 +00:00
org.go	Refactor names (#31405)	2024-06-19 06:32:45 +08:00
package.go	Refactor names (#31405)	2024-06-19 06:32:45 +08:00
pagination.go	Remove AddParamIfExist(AddParam) (#29841)	2024-03-16 12:07:56 +00:00
permission.go	Allow maintainers to view and edit files of private repos when "Allow maintainers to edit" is enabled (#32215)	2024-10-11 19:08:19 +00:00
private.go
repo.go	Refactor RepoRefByType (#32413)	2024-11-05 06:35:54 +00:00
response.go
user.go	Refactor names (#31405)	2024-06-19 06:32:45 +08:00
utils.go
xsrf_test.go
xsrf.go