Git with a cup of tea! Painless self-hosted all-in-one software development service, includes Git hosting, code review, team collaboration, package registry and CI/CD
Go to file
6543 fb274ec54b
Prevent panic on fuzzer provided string (#14405) (#14409)
* Prevent panic on fuzzer provided string

The fuzzer has found that providing a <body> tag with an attribute to
PostProcess causes a panic. This PR removes any rendered html or body
tags from the output.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Placate lint

* placate lint again

Signed-off-by: Andrew Thornton <art27@cantab.net>

* minor cleanup

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: zeripath <art27@cantab.net>
2021-01-20 20:47:30 +02:00
.github Improve stale message (#9920) 2020-01-22 12:55:27 +02:00
assets Rework 'make generate-images' (#12316) 2020-07-26 17:47:51 +08:00
build update revive lint to latest commit (#12921) 2020-09-22 20:02:16 +03:00
cmd Whenever the password is updated ensure that the hash algorithm is too (#13966) (#13967) 2020-12-13 01:01:44 +01:00
contrib Fix args in tasks.json (#13116) 2020-10-12 14:44:01 -04:00
custom/conf Use Request.URL.RequestURI() for fcgi (#14312) (#14347) 2021-01-15 20:26:45 +08:00
docker Set RUN_MODE prod by default (#13765) (#13767) 2020-12-01 09:55:38 +08:00
docs Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776) 2020-12-01 19:28:34 -05:00
integrations Migrations: Use Process Manager to create own Context (#13793) 2020-12-02 15:11:11 -06:00
models Check if label template exist first (#14384) (#14389) 2021-01-19 00:27:33 +02:00
modules Prevent panic on fuzzer provided string (#14405) (#14409) 2021-01-20 20:47:30 +02:00
options Validate email before inserting/updating (#13475) (#13666) 2020-11-22 12:31:35 -05:00
public Store task errors following migrations and display them (#13246) (#13287) 2020-10-24 13:02:36 +08:00
routers Use path not filepath in routers/editor (#14390) (#14396) 2021-01-19 17:00:13 +08:00
services fix mailIssueCommentBatch for pull request (#14252) (#14296) 2021-01-11 08:46:19 +08:00
snap set git-core paths in snap (#13711) (#13781) 2020-12-01 19:36:11 -05:00
templates Removed invalid form tag (#14391) (#14395) 2021-01-19 07:12:04 +02:00
tools Add 'make watch' (#12636) 2020-09-04 20:55:06 -04:00
vendor Fix bug of link query order on markdown render (#14156) (#14171) 2020-12-28 12:08:55 -05:00
web_src Fix edit-label form init (#14337) 2021-01-14 15:03:16 +02:00
.air.conf Add 'watch-backend' (#12330) 2020-07-27 14:05:42 -04:00
.changelog.yml Add API Section to Changelog (#13125) 2020-10-13 01:39:17 -04:00
.drone.yml use registry mirror for docker-in-docker (#13438) (#13445) 2020-11-06 20:42:56 +00:00
.editorconfig Reindent Less to 2-space (#12602) 2020-08-25 22:48:53 +03:00
.eslintrc Update JS dependencies (#12702) 2020-09-04 00:26:50 +03:00
.gitattributes Update vendored .gitattributes (#12322) 2020-07-27 00:17:01 -04:00
.gitignore Move jquery-minicolors to npm/webpack (#12305) 2020-07-29 14:44:23 -04:00
.golangci.yml Update golangci-lint to version 1.31.0 (#13102) 2020-10-11 21:27:20 +01:00
.ignore Fonts rework (#12114) 2020-07-06 11:56:54 +03:00
.lgtm
.npmrc add package-lock=true in .npmrc (#9736) 2020-01-13 00:11:43 +01:00
.revive.toml refactor: replace lint to revive (#5422) 2018-12-03 09:28:46 -05:00
.stylelintrc File header tweaks, add CSS helpers (#12635) 2020-09-08 13:17:56 -04:00
BSDmakefile
CHANGELOG.md Add changelog for v1.13.1 (#14172) 2020-12-28 12:36:22 -05:00
CONTRIBUTING.md Add link to owners election tickets, reorder to most-recent first (#11632) 2020-05-26 16:11:26 -05:00
DCO
Dockerfile Update Dockerfile (#12922) 2020-09-27 18:52:22 -04:00
LICENSE
MAINTAINERS Add myself to MAINTAINERS (#11494) 2020-05-18 16:50:22 -05:00
Makefile Fix Fomatic Build (#13596) 2020-11-16 18:01:05 -05:00
README.md fix readme format (#12797) 2020-09-10 13:05:15 -04:00
README_ZH.md update discord link (#10455) 2020-02-25 12:36:45 -05:00
SECURITY.md Add security policy to repo (#12536) 2020-08-19 17:15:55 +01:00
build.go update revive lint to latest commit (#12921) 2020-09-22 20:02:16 +03:00
go.mod Fix bug of link query order on markdown render (#14156) (#14171) 2020-12-28 12:08:55 -05:00
go.sum Fix bug of link query order on markdown render (#14156) (#14171) 2020-12-28 12:08:55 -05:00
main.go Update golangci-lint to version 1.31.0 (#13102) 2020-10-11 21:27:20 +01:00
package-lock.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
package.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
semantic.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
webpack.config.js Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00

README.md

简体中文

logo Gitea - Git with a cup of tea

Build Status Join the Discord chat at https://discord.gg/Gitea codecov Go Report Card GoDoc GitHub release Help Contribute to Open Source Become a backer/sponsor of gitea License: MIT Crowdin TODOs

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. Using Go, this can be done with an independent binary distribution across all platforms which Go supports, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. Want to try it before doing anything else? Do it with the online demo! This project has been forked from Gogs since 2016.11 but changed a lot.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if sqlite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go 1.13 or greater.
  • make frontend which requires Node.js 10.13 or greater.

If pre-built frontend files are present it is possible to only build the backend:

TAGS="bindata" make backend

Parallelism is not supported for these targets, so please don't include -j <num>.

More info: https://docs.gitea.io/en-us/install-from-source/

Using

./gitea web

NOTE: If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

NOTES:

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server, or forum!

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark