Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ...

* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject

2020-01-05 01:20:08 +02:00

..

admin

Graceful: Xorm, RepoIndexer, Cron and Others (#9282)

2019-12-15 09:51:28 +00:00

api/v1

[API] dont reqToken on GetReactions (fix #9543) (#9548)

2020-01-02 23:27:31 +02:00

dev

Display ui time with customize time location (#7792)

2019-08-15 22:46:21 +08:00

org

site admin could view org's members (#9346)

2019-12-14 01:36:59 -05:00

private

Add branch protection option to block merge on requested changes. (#9592)

2020-01-03 19:47:09 +02:00

repo

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

routes

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

user

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

utils

Slack webhook channel name cannot be empty or just contain an hashtag (#4786)

2018-09-10 10:31:08 -04:00

home.go

Use Req.URL.RequestURI() to cope with FCGI urls (#9473)

2019-12-24 00:11:12 +00:00

init.go

Refactor code indexer (#9313)

2019-12-23 20:31:16 +08:00

install.go

Graceful: Xorm, RepoIndexer, Cron and Others (#9282)

2019-12-15 09:51:28 +00:00

metrics.go

Use gitea forked macaron (#7933)

2019-08-23 12:40:29 -04:00

swagger_json.go

Swagger.v1.json template (#3572)

2018-07-28 03:19:01 +03:00