##// END OF EJS Templates
Commit Message Age Author Refs
load previous
r2181:0bf8e4db
pull-requests: security, prevent from injecting comments to other pull requests users don't have access to.
0
r2180:d1b66400
repo-settings: ensure deletion on repo settings model validate the settings id against the initialized model repo. - prevents from malicious deletions of settings by forgin IDs
0
r2179:a3d55bf9
select2: always escape .text attributes to prevent XSS via vcs references.
0
r2178:34dda1ab
templates: rename base.mako into summary_base.mako. The previous naming wasn't optimal for search and code discovery.
0
r2177:4abf28f1
pull-requests: security double check permissions on injected forms of source and target repositories.
0
r2176:d21fb0df
db: prevent empty IN queries that generally are performance problem, and triggers sql warnings.
0
r2175:ea878558
repo-groups: moved to pyramid
0
r2174:b234a120
tests: change name of test module of auth-modules to prevent pytest complaining about it.
0
r2173:d100eea4
repo-forks: security, check for access to fork_id parameter to prevent resource discovery.
0
r2172:f94ee74b
repo-forks: security, fix issue when forging fork_repo_id could allow reading other people forks.
0
r2171:01313011
repo-settings: fix error on passing in _anchor into wrong call. Needs to be for routing and not for HttpFound.
0
r2170:4adf3415
auth: don't cache settings for auth plugins
0
r2169:94d9c7f1
caches: clear perms cache manager while updating settings for auth plugins
0
r2168:41032fb6
pull-requests: trigger merge simulation during PR creation. Fixes #5396
0
r2167:23aaeb72
quick-filter: make sure we always apply IN filter query. Otherwise we can end up iwth empty query which disables the ACL filter.
0
r2166:5bbfeee4
processes: use better naming detection of running children processes
0
r2165:e4d38834
processes: use better naming detection of running processes
0
r2164:c5a68adf
docs: don't use deprecated header for channelstream views
0
r2163:a6065ad2
channelstream: use pyramid http exception instead of webob. In Pyramid views we want to use pyramid http exceptions for better error tracking.
0
r2162:b4089215
files: remove rigth-to-left override character for display in files. This allows faking the name a bit, we in this particular place want to skip the override for enhanced security.
0
load next
< 1 .. 157 158 159 160 161 .. 268 >
showing 20 out of 5342 commits