Files
bircni 9e84deb969 fix: Various sec fixes 2 (#38108)
- Enforce repository token scope on RSS/Atom feed endpoints so a PAT
without repo scope can no longer read private repo commit data.
- Block HTTP redirects during repository migration clones to prevent
SSRF reaching internal addresses via an attacker-controlled redirect.
- Redact the notification subject after repo access is revoked so
private issue/PR metadata is no longer leaked through the notification
API.

---------

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2026-06-17 06:50:25 +02:00
..
2026-06-12 07:35:59 +02:00
2025-10-23 08:35:48 +00:00
2025-01-13 14:01:53 +08:00
2026-06-12 18:27:38 +00:00
2026-06-12 18:27:38 +00:00
2026-06-17 06:50:25 +02:00
2026-06-17 06:50:25 +02:00
2025-07-30 07:08:59 +00:00

Git Module

This module is merged from https://github.com/go-gitea/git which is a Go module to access Git through shell commands. Now it's a part of gitea's main repository for easier pull request.