gitea/services/attachment
Kemal Zebari 7adc4717ec
Include file extension checks in attachment API ()
From testing, I found that issue posters and users with repository write
access are able to edit attachment names in a way that circumvents the
instance-level file extension restrictions using the edit attachment
APIs. This snapshot adds checks for these endpoints.
2024-11-06 21:34:32 +00:00
..
attachment.go Include file extension checks in attachment API () 2024-11-06 21:34:32 +00:00
attachment_test.go Even more `db.DefaultContext` refactor () 2023-10-03 10:30:41 +00:00