1
0
Fork 0
Beyond coding. We forge. https://codeberg.org/forgejo/forgejo
Find a file
zeripath 172229966c
Prevent panic on fuzzer provided string (#14405)
* Prevent panic on fuzzer provided string

The fuzzer has found that providing a <body> tag with an attribute to
PostProcess causes a panic. This PR removes any rendered html or body
tags from the output.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Placate lint

* placate lint again

Signed-off-by: Andrew Thornton <art27@cantab.net>

* minor cleanup

Signed-off-by: Andrew Thornton <art27@cantab.net>
2021-01-20 23:10:50 +08:00
.github Kd/add bountysource (#14323) 2021-01-13 10:53:17 -05:00
assets Clean up SVG (#13680) 2020-12-17 16:33:53 -05:00
build Consolidate Logos and update README header (#14136) 2021-01-01 14:04:35 -05:00
cmd Use IsProd instead of testing if it's equal. (#14336) 2021-01-14 23:17:03 +02:00
contrib migrate from com.* to alternatives (#14103) 2020-12-25 11:59:32 +02:00
custom/conf Add pager to the branches page (#14202) 2021-01-19 05:07:38 +01:00
docker Set RUN_MODE prod by default (#13765) 2020-11-30 14:52:04 -05:00
docs Note that all template directories are relative to the CustomPath configuration, not a custom directory inside it (#14399) 2021-01-19 10:50:55 -05:00
integrations Issues overview should not show issues from archived repos (#13220) 2021-01-12 23:19:17 -05:00
models Check if label template exist first (#14384) 2021-01-18 21:00:50 +01:00
modules Prevent panic on fuzzer provided string (#14405) 2021-01-20 23:10:50 +08:00
options Display error if twofaSecret cannot be retrieved (#14372) 2021-01-18 21:38:41 +01:00
public Consolidate Logos and update README header (#14136) 2021-01-01 14:04:35 -05:00
routers Fix log http status is always zero (#14400) 2021-01-19 20:47:43 -05:00
services label and milestone webhooks on issue/pull creation (#14363) 2021-01-17 16:15:57 +02:00
snap Consolidate Logos and update README header (#14136) 2021-01-01 14:04:35 -05:00
templates Align dropdown right (#14406) 2021-01-20 02:08:21 +01:00
tools Added 2 fuzzers (#13818) 2020-12-10 20:43:11 +01:00
vendor Upgrade blevesearch dependency to v2.0.1 (#14346) 2021-01-17 20:21:14 -05:00
web_src Align dropdown right (#14406) 2021-01-20 02:08:21 +01:00
.air.conf Add 'watch-backend' (#12330) 2020-07-27 14:05:42 -04:00
.changelog.yml Add API Section to Changelog (#13125) 2020-10-13 01:39:17 -04:00
.drone.yml upgrade to alpine 3.13 (#14343) 2021-01-20 05:21:01 +01:00
.editorconfig Fix .editorconfig (#13735) 2020-11-28 20:29:46 +02:00
.eslintrc Update JS dependencies and webpack (#14118) 2020-12-27 15:24:27 +01:00
.gitattributes Update JS dependencies and misc tweaks (#13741) 2020-11-29 16:39:36 -05:00
.gitignore Precompile fomantic-ui files (#13332) 2020-10-27 19:44:06 -04:00
.golangci.yml Move webhook type from int to string (#13664) 2020-12-08 11:41:14 +01:00
.ignore Fonts rework (#12114) 2020-07-06 11:56:54 +03:00
.lgtm refactor: ignore LGTM from author of pull request. (#3283) 2018-01-02 06:13:49 -06:00
.npmrc Update JS dependencies and misc tweaks (#13741) 2020-11-29 16:39:36 -05:00
.revive.toml refactor: replace lint to revive (#5422) 2018-12-03 09:28:46 -05:00
.stylelintrc Fix tooltips and issue dependency styles (#13458) 2020-11-10 20:28:07 +02:00
BSDmakefile Add BSDmakefile to prevent errors when make is called under FreeBSD (#4446) 2018-07-16 20:45:51 +02:00
build.go update revive lint to latest commit (#12921) 2020-09-22 20:02:16 +03:00
CHANGELOG.md frontport 1.13.1 changelog (#14175) 2020-12-28 19:38:44 -05:00
CONTRIBUTING.md Update owners for 2021 (#14206) 2021-01-01 01:41:03 +02:00
DCO follow the advisor: add DCO and some improvements 2016-11-04 16:43:41 +08:00
Dockerfile upgrade to alpine 3.13 (#14343) 2021-01-20 05:21:01 +01:00
Dockerfile.rootless upgrade to alpine 3.13 (#14343) 2021-01-20 05:21:01 +01:00
go.mod Upgrade blevesearch dependency to v2.0.1 (#14346) 2021-01-17 20:21:14 -05:00
go.sum Upgrade blevesearch dependency to v2.0.1 (#14346) 2021-01-17 20:21:14 -05:00
LICENSE Fix typo 2016-11-08 08:42:05 +01:00
main.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
MAINTAINERS Remove self from MAINTAINERS (#14286) 2021-01-09 01:53:19 -05:00
Makefile It seems vet on windows is unnecessary (#14302) 2021-01-19 02:56:10 +01:00
package-lock.json Update JS dependencies and webpack (#14118) 2020-12-27 15:24:27 +01:00
package.json Update JS dependencies and webpack (#14118) 2020-12-27 15:24:27 +01:00
README.md Update Link 2021-01-13 10:55:52 -05:00
README_ZH.md Kd/add bountysource (#14323) 2021-01-13 10:53:17 -05:00
SECURITY.md Add security policy to repo (#12536) 2020-08-19 17:15:55 +01:00
semantic.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
webpack.config.js Update JS dependencies and webpack (#14118) 2020-12-27 15:24:27 +01:00

Gitea

Gitea - Git with a cup of tea

View the chinese version of this document

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. Using Go, this can be done with an independent binary distribution across all platforms which Go supports, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. Want to try it before doing anything else? Do it with the online demo! This project has been forked from Gogs since 2016.11 but changed a lot.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if sqlite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go 1.13 or greater.
  • make frontend which requires Node.js 10.13 or greater.

If pre-built frontend files are present it is possible to only build the backend:

TAGS="bindata" make backend

Parallelism is not supported for these targets, so please don't include -j <num>.

More info: https://docs.gitea.io/en-us/install-from-source/

Using

./gitea web

NOTE: If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

NOTES:

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server or create a post in the discourse forum.

We maintain a list of Gitea-related projects at gitea/awesome-gitea.
The hugo-based documentation theme is hosted at gitea/theme.
The official Gitea CLI is developed at gitea/tea.

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark