1
0
Fork 0
forgejo/modules
Jason Song 67bd9d4f1e
Restrict [actions].DEFAULT_ACTIONS_URL to only github or self (#25581)
Resolve #24789

## ⚠️ BREAKING ⚠️

Before this, `DEFAULT_ACTIONS_URL` cound be set to any custom URLs like
`https://gitea.com` or `http://your-git-server,https://gitea.com`, and
the default value was `https://gitea.com`.

But now, `DEFAULT_ACTIONS_URL` supports only
`github`(`https://github.com`) or `self`(the root url of current Gitea
instance), and the default value is `github`.

If it has configured with a URL, an error log will be displayed and it
will fallback to `github`.

Actually, what we really want to do is always make it
`https://github.com`, however, this may not be acceptable for some
instances of internal use, so there's extra support for `self`, but no
more, even `https://gitea.com`.

Please note that `uses: https://xxx/yyy/zzz` always works and it does
exactly what it is supposed to do.

Although it's breaking, I belive it should be backported to `v1.20` due
to some security issues.

Follow-up on the runner side:

- https://gitea.com/gitea/act_runner/pulls/262
- https://gitea.com/gitea/act/pulls/70
2023-06-30 07:26:36 +00:00
..
actions Support downloading raw task logs (#24451) 2023-06-29 10:58:56 +08:00
activitypub
analyze
assetfs
auth
avatar
base Update octicons and use octicon-file-directory-symlink (#25453) 2023-06-22 22:05:52 +00:00
cache
charset
container
context Sync branches into databases (#22743) 2023-06-29 10:03:20 +00:00
csv
doctor
emoji Update emoji set to Unicode 15 (#25595) 2023-06-29 16:29:48 +00:00
eventsource
generate
git
gitgraph
graceful
hcaptcha
highlight
hostmatcher
html
httpcache
httplib
indexer Fix Init of db indexer (#25470) 2023-06-23 14:39:52 +00:00
issue/template
json
label
lfs
log Fix sub-command log level (#25537) 2023-06-28 08:02:06 +02:00
markup
mcaptcha
metrics
migration
mirror
nosql
notification Add Adopt repository event and handler (#25497) 2023-06-26 06:59:15 +00:00
options
packages
paginator
pprof
private
process
proxy
proxyprotocol
public
queue
recaptcha
references
regexplru
repository Sync branches into databases (#22743) 2023-06-29 10:03:20 +00:00
secret
session
setting Restrict [actions].DEFAULT_ACTIONS_URL to only github or self (#25581) 2023-06-30 07:26:36 +00:00
sitemap
ssh
storage
structs Add API for changing Avatars (#25369) 2023-06-29 23:22:55 +00:00
svg
sync
system
templates Fix missing commit message body when the message has leading newlines (#25418) 2023-06-21 09:14:34 +00:00
test
testlogger
timeutil
translation
turnstile
typesniffer
updatechecker
upload
uri
user
util Store and use seconds for timeline time comments (#25392) 2023-06-23 12:12:39 +00:00
validation
web
webhook