1
0
Fork 0
forgejo/models
Gusted f5af5050b3
[GITEA] Use restricted sanitizer for repository description
- Currently the repository description uses the same sanitizer as a
normal markdown document. This means that element such as heading and
images are allowed and can be abused.
- Create a minimal restricted sanitizer for the repository description,
which only allows what the postprocessor currently allows, which are
links and emojis.
- Added unit testing.
- Resolves https://codeberg.org/forgejo/forgejo/issues/1202
- Resolves https://codeberg.org/Codeberg/Community/issues/1122

(cherry picked from commit a8afa4cd18)
(cherry picked from commit 0238587c51)
(cherry picked from commit a8c7bbf728)
(cherry picked from commit 80e05a8245)
2023-10-09 20:44:24 +02:00
..
actions [CLI] implement forgejo-cli 2023-10-09 17:15:31 +02:00
activities Add Index to action.user_id (#27403) 2023-10-03 21:41:25 -04:00
admin Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
asymkey make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
auth [GITEA] silently ignore obsolete sudo scope 2023-10-09 20:25:23 +02:00
avatars Refactor system setting (#27000) 2023-10-05 09:08:19 +08:00
db [GITEA] Add slow SQL query warning 2023-10-09 20:25:24 +02:00
dbfs make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
fixtures [GITEA] Improve HTML title on repositories 2023-10-09 20:25:23 +02:00
forgejo/semver [v1.22] [SEMVER] store SemVer in ForgejoSemVer after a database upgrade 2023-10-09 19:11:03 +02:00
forgejo_migrations [SEMVER] store SemVer in ForgejoSemVer after a database upgrade 2023-10-09 19:11:03 +02:00
git Restore warning commit status (#27504) 2023-10-08 22:16:06 +00:00
issues [GITEA] enable system users for comment.LoadPoster 2023-10-09 20:44:24 +02:00
migrations [UPGRADE] run sanity checks before the database is upgraded 2023-10-09 19:11:03 +02:00
organization Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
packages make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
perm Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
project More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
pull refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
repo [GITEA] Use restricted sanitizer for repository description 2023-10-09 20:44:24 +02:00
secret Refactor secrets modification logic (#26873) 2023-09-05 15:21:02 +00:00
shared/types Display owner of a runner as a tooltip instead of static text (#24377) 2023-05-12 08:43:27 +00:00
system Refactor system setting (#27000) 2023-10-05 09:08:19 +08:00
unit Use Set[Type] instead of map[Type]bool/struct{}. (#26804) 2023-08-30 06:55:25 +00:00
unittest [TESTS] tests.AddFixtures helper loads additional per-test fixtures 2023-10-09 19:11:03 +02:00
user [GITEA] enable system users search via the API 2023-10-09 20:44:24 +02:00
webhook make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
error.go Sync branches into databases (#22743) 2023-06-29 10:03:20 +00:00
fixture_generation.go Fix yaml test (#27297) 2023-09-26 23:30:03 -04:00
fixture_test.go Fix yaml test (#27297) 2023-09-26 23:30:03 -04:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
org.go refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
org_team.go Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
org_team_test.go Reduce usage of db.DefaultContext (#27073) 2023-09-14 17:09:32 +00:00
org_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
repo.go Refactor system setting (#27000) 2023-10-05 09:08:19 +08:00
repo_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
repo_transfer.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
repo_transfer_test.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00