wxiaoguang ef339713c2 Refactor internal routers (partial backport, auth token const time comparing) (#32473) (#32479) ...

Partially backport #32473. LFS related changes are not in 1.22, so skip
them.

1. Ignore non-existing repos during migrations
2. Improve ReadBatchLine's comment
3. Use `X-Gitea-Internal-Auth` header for internal API calls and make
the comparing constant time (it wasn't a serous problem because in a
real world it's nearly impossible to timing-attack the token, but indeed
security related and good to fix and backport)
4. Fix route mock nil check

2024-11-13 10:26:37 +08:00

3.9 KiB

Raw Blame History

View Raw