zeripath 2f76608221

Prevent security failure due to bad APP_ID (#18678) ...

WebAuthn may cause a security exception if the provided APP_ID is not allowed for the
current origin. Therefore we should reattempt authentication without the appid
extension.

Also we should allow [u2f] as-well as [U2F] sections.

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2022-02-09 15:37:58 +08:00

..

attachment.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

cache.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

cors.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

cron_test.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

cron.go

Allow extended config on cron settings (#12939)

2020-09-25 09:58:09 +01:00

database_sqlite.go

Refactor install page (db type) (#17919)

2021-12-07 13:44:08 +08:00

database_test.go

Move database settings from models to setting (#7806)

2019-08-24 11:24:45 +02:00

database.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

directory.go

Improve install code to avoid low-level mistakes. (#17779)

2021-12-01 15:50:01 +08:00

federation.go

Add nodeinfo endpoint for federation purposes (#16953)

2021-09-28 01:38:06 +02:00

git.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

i18n.go

Improve install code to avoid low-level mistakes. (#17779)

2021-12-01 15:50:01 +08:00

indexer_test.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

indexer.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

lfs.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

log.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

mailer.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

markup.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

migrations.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

mime_type_map.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

mirror.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

oauth2_client.go

OAuth2 login: Set account link to "login" as default behavior (#15768)

2021-05-07 16:15:16 +02:00

picture.go

Make AvatarRenderedSizeFactor configurable and set it to 3 (#17951)

2021-12-16 10:18:38 +08:00

project.go

Kanban board (#8346)

2020-08-16 23:07:38 -04:00

proxy.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

queue.go

Enable deprecation error for v1.17.0 (#18341)

2022-01-20 18:00:38 +01:00

repository.go

Warn at startup if the provided SCRIPT_TYPE is not on the PATH (#18467)

2022-01-30 16:33:36 +00:00

service.go

add configuration option to restrict users by default (#16256)

2021-07-15 15:19:48 -04:00

session.go

format with gofumpt (#18184)

2022-01-20 18:46:10 +01:00

setting_test.go

Add an abstract json layout to make it's easier to change json library (#16528)

2021-07-24 18:03:58 +02:00

setting.go

Prevent security failure due to bad APP_ID (#18678)

2022-02-09 15:37:58 +08:00

storage_test.go

more test case for STORAGE_TYPE overrides (and fixes) (#14096)

2020-12-22 01:03:18 +02:00

storage.go

Rework repository archive (#14723)

2021-06-23 17:12:38 -04:00

task.go

Enable deprecation error for v1.17.0 (#18341)

2022-01-20 18:00:38 +01:00

webhook.go

Add packagist webhook (#18224)

2022-01-23 21:46:30 +08:00