Gusted 4c8c215b75 fix(sec): web route update and delete runner variables ... The web route to update and delete variables of runners did not check if the ID that was given belonged to the context it was requested in, this made it possible to update and delete every existing runner variable of a instance for any authenticated user. The code has been reworked to always take into account the context of the request (owner and repository ID). (cherry picked from commit 5cb8fdfc8b9213cc368cd074aac93a1327ea20b0)		2025-02-08 07:50:19 +00:00
..
admin	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
auth	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
devtest	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
events	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
explore	Repository explore alphabetically order respect owner name (#30882)	2024-05-14 15:31:36 +02:00
feed	Teach activities.GetFeeds() how to avoid returning duplicates	2024-05-09 18:37:30 +00:00
healthcheck	Add health-check test	2024-04-06 08:44:23 +00:00
misc	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
org	Add missed return after ctx.ServerError (#31130) (#31133)	2024-05-31 14:35:19 +02:00
repo	fix(sec): web route update and delete runner variables	2025-02-08 07:50:19 +00:00
shared	fix(sec): web route update and delete runner variables	2025-02-08 07:50:19 +00:00
user	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
base.go	Fix panic in storageHandler (#27446)	2023-10-06 13:23:14 +00:00
githttp.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
goget.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
home.go	migrate some more "OptionalBool" to "Option[bool]" (#29479)	2024-03-06 12:10:44 +08:00
metrics.go	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
nodeinfo.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
swagger_json.go	Move context from modules to services (#29440)	2024-03-06 12:10:43 +08:00
web.go	fix: require code permissions for branch feed	2024-11-15 11:59:08 +01:00
webfinger.go	fix: respond with JSON Resource Descriptor Content-Type per RFC7033	2024-04-02 09:41:57 +00:00