2b36bdd490
* Do not display the raw OpenID error in the UI If there are no `WHITELIST_URIS` or `BLACKLIST_URIS` set in the openid section of the app.ini, it is possible that gitea can leak sensitive information about the local network through the error provided by the UI. This PR hides the error information and logs it. Fix #4973 Signed-off-by: Andrew Thornton <art27@cantab.net> * Update auth_openid.go Place error log within the `err != nil` branch. |
||
---|---|---|
.. | ||
admin | ||
api/v1 | ||
dev | ||
org | ||
private | ||
repo | ||
routes | ||
user | ||
utils | ||
home.go | ||
init.go | ||
install.go | ||
metrics.go | ||
swagger_json.go |