silverwind
cda44750cb
Attachments: Add extension support, allow all types for releases ( #12465 )
...
* Attachments: Add extension support, allow all types for releases
- Add support for file extensions, matching the `accept` attribute of `<input type="file">`
- Add support for type wildcard mime types, e.g. `image/*`
- Create repository.release.ALLOWED_TYPES setting (default unrestricted)
- Change default for attachment.ALLOWED_TYPES to a list of extensions
- Split out POST /attachments into two endpoints for issue/pr and
releases to prevent circumvention of allowed types check
Fixes: https://github.com/go-gitea/gitea/pull/10172
Fixes: https://github.com/go-gitea/gitea/issues/7266
Fixes: https://github.com/go-gitea/gitea/pull/12460
Ref: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file#Unique_file_type_specifiers
* rename function
* extract GET routes out of RepoMustNotBeArchived
Co-authored-by: Lauris BH <lauris@nix.lv>
2020-10-05 01:49:33 -04:00
Lunny Xiao
1645d4a5d8
Use ID or Where to instead directly use Get when load object from database ( #11925 )
...
* Use ID or Where to instead directly use Get when load object from database
* Apply suggestions from code review
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: zeripath <art27@cantab.net>
2020-06-17 20:50:11 +03:00
Lunny Xiao
85202d4784
Display ui time with customize time location ( #7792 )
...
* display ui time with customize time location
* fix lint
* rename UILocation to DefaultUILocation
* move time related functions to modules/timeutil
* fix tests
* fix tests
* fix build
* fix swagger
2019-08-15 22:46:21 +08:00
SagePtr
59f879bfec
Fix double-generation of scratch token ( #6832 ) ( #6833 )
2019-05-02 23:06:01 +03:00
techknowlogick
adf3f004b6
Switch plaintext scratch tokens to use hash instead ( #4331 )
2018-07-27 08:54:50 -04:00
Lauris BH
1e1ece8f3d
Do not allow to reuse TOTP passcode ( #3878 )
2018-05-02 18:02:02 +03:00
Codruț Constantin Gușoi
96c268c0fc
Implements generator cli for secrets ( #3531 )
...
Signed-off-by: Codruț Constantin Gușoi <codrut.gusoi@gmail.com>
2018-02-18 20:14:37 +02:00
Morgan Bazalgette
edce41ae65
go back to using CFB for AES decryption/encryption for 2FA ( #3274 )
2017-12-31 04:19:42 +02:00
Lunny Xiao
f2e20c81b6
Refactor struct's time to remove unnecessary memory usage ( #3142 )
...
* refactor struct's time to remove unnecessary memory usage
* use AsTimePtr simple code
* fix tests
* fix time compare
* fix template on gpg
* use AddDuration instead of Add
2017-12-11 06:37:04 +02:00
Ethan Koenig
b7ebaf6d20
Various wiki bug fixes ( #2996 )
...
* Update macaron
* Various wiki bug fixes
2017-11-28 17:43:51 +08:00
Ethan Koenig
aa962deec0
Replace deprecated Id method with ID ( #2655 )
2017-10-05 07:43:04 +03:00
Lunny Xiao
a8717e5e3a
Use AfterLoad instead of AfterSet on Structs ( #2628 )
...
* use AfterLoad instead of AfterSet on Structs
* fix the comments on AfterLoad
* fix the comments on action AfterLoad
2017-10-01 19:52:35 +03:00
Lunny Xiao
005900baea
Use created & updated instead BeforeInsert & BeforeUpdate ( #2482 )
...
* use created & updated instead BeforeInsert & BeforeUpdate
* fix vendor checksum
* only show generated SQL when development mode
* remove extra update column updated_unix
* remove trace config
2017-09-13 08:18:22 +03:00
Andrew
6dd096b7f0
Two factor authentication support ( #630 )
...
* Initial commit for 2FA support
Signed-off-by: Andrew <write@imaginarycode.com>
* Add vendored files
* Add missing depends
* A few clean ups
* Added improvements, proper encryption
* Better encryption key
* Simplify "key" generation
* Make 2FA enrollment page more robust
* Fix typo
* Rename twofa/2FA to TwoFactor
* UNIQUE INDEX -> UNIQUE
2017-01-16 10:14:29 +08:00
