forkjo/routers/api/v1/repo
Gusted 618eb8e72a security: add permission check to 'delete branch after merge'
- Add a permission check that the doer has write permissions to the head
repository if the the 'delete branch after merge' is enabled when
merging a pull request.
- Unify the checks in the web and API router to `DeleteBranchAfterMerge`.
- Added integration tests.

(cherry picked from commit 266e0b2ce9)
2024-10-28 06:04:45 +00:00
..
action.go Set owner id to zero when GetRegistrationToken for repo (#31725) 2024-08-04 10:14:34 +02:00
avatar.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
blob.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
branch.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
collaborators.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
commits.go Return 404 instead of error when commit not exist (#31977) 2024-09-09 20:54:47 +02:00
compare.go Enable unparam linter (#31277) 2024-06-16 13:42:58 +02:00
file.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
flags.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
fork.go chore(refactor): split repo_service.ForkRepository in two 2024-08-11 12:40:34 +02:00
git_hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
git_ref.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
hook_test.go [TESTS] Fix usage of LoadRepoCommit 2024-08-26 08:03:48 +02:00
issue.go Fix bug when a token is given public only 2024-10-11 05:24:23 +03:00
issue_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_comment.go Load attachments for /issues/comments/{id} 2024-07-16 11:09:54 +02:00
issue_comment_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_dependency.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_label.go Support using label names when changing issue labels (#30943) 2024-05-19 13:12:35 +02:00
issue_pin.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_reaction.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_stopwatch.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_subscription.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
issue_tracked_time.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
key.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
label.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
language.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
migrate.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
milestone.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
mirror.go [FIX] Don't allow SSH authentication without ssh executable 2024-08-26 08:58:35 +02:00
notes.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
patch.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
pull.go security: add permission check to 'delete branch after merge' 2024-10-28 06:04:45 +00:00
pull_review.go Fix the logic of finding the latest pull review commit ID (#32139) 2024-10-06 11:34:08 +02:00
release.go Handle invalid target when creating releases using API (#31841) 2024-09-14 18:45:18 +02:00
release_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
release_tags.go Protected tag is no internal server error (#30962) 2024-05-19 13:12:35 +02:00
repo.go fix: don't cancel schedule workflows on push to main branch 2024-10-13 12:25:59 +00:00
repo_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
star.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
status.go Cache repository default branch commit status to reduce query on commit status table (#29444) 2024-03-11 23:36:58 +07:00
subscriber.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
tag.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
teams.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
topic.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
transfer.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
tree.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
wiki.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00