forgejo/models
Gusted 608f981e55
[GITEA] Use restricted sanitizer for repository description
- Currently the repository description uses the same sanitizer as a
normal markdown document. This means that element such as heading and
images are allowed and can be abused.
- Create a minimal restricted sanitizer for the repository description,
which only allows what the postprocessor currently allows, which are
links and emojis.
- Added unit testing.
- Resolves https://codeberg.org/forgejo/forgejo/issues/1202
- Resolves https://codeberg.org/Codeberg/Community/issues/1122

(cherry picked from commit a8afa4cd18)
(cherry picked from commit 0238587c51)
(cherry picked from commit a8c7bbf728)
(cherry picked from commit 80e05a8245)
(cherry picked from commit f5af5050b3)
2023-10-16 16:55:04 +02:00
..
actions [CLI] implement forgejo-cli 2023-10-16 12:49:08 +02:00
activities Penultimate round of db.DefaultContext refactor (#27414) 2023-10-11 04:24:07 +00:00
admin Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
asymkey Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
auth [GITEA] silently ignore obsolete sudo scope 2023-10-16 16:51:07 +02:00
avatars Final round of db.DefaultContext refactor (#27587) 2023-10-14 08:37:24 +00:00
db [GITEA] Add slow SQL query warning 2023-10-16 16:53:49 +02:00
dbfs make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
fixtures [GITEA] Improve HTML title on repositories 2023-10-16 16:53:49 +02:00
forgejo/semver [v1.22] [SEMVER] store SemVer in ForgejoSemVer after a database upgrade 2023-10-16 14:37:59 +02:00
forgejo_migrations [SEMVER] store SemVer in ForgejoSemVer after a database upgrade 2023-10-16 14:37:58 +02:00
git Restore warning commit status (#27504) 2023-10-08 22:16:06 +00:00
issues [GITEA] enable system users for comment.LoadPoster 2023-10-16 16:54:52 +02:00
migrations [UPGRADE] run sanity checks before the database is upgraded 2023-10-16 14:37:58 +02:00
organization Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
packages make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
perm Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
project More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
pull refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
repo [GITEA] Use restricted sanitizer for repository description 2023-10-16 16:55:04 +02:00
secret Refactor secrets modification logic (#26873) 2023-09-05 15:21:02 +00:00
shared/types Display owner of a runner as a tooltip instead of static text (#24377) 2023-05-12 08:43:27 +00:00
system Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
unit Make actions default enabled for newly created repository if global configuraion enabled (#27482) 2023-10-10 14:45:31 +00:00
unittest [TESTS] tests.AddFixtures helper loads additional per-test fixtures 2023-10-16 14:37:59 +02:00
user [GITEA] enable system users search via the API 2023-10-16 16:54:52 +02:00
webhook Final round of db.DefaultContext refactor (#27587) 2023-10-14 08:37:24 +00:00
error.go Sync branches into databases (#22743) 2023-06-29 10:03:20 +00:00
fixture_generation.go Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
fixture_test.go Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
org.go Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
org_team.go Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
org_team_test.go Reduce usage of db.DefaultContext (#27073) 2023-09-14 17:09:32 +00:00
org_test.go Replace more db.DefaultContext (#27628) 2023-10-15 17:46:06 +02:00
repo.go Penultimate round of db.DefaultContext refactor (#27414) 2023-10-11 04:24:07 +00:00
repo_test.go Penultimate round of db.DefaultContext refactor (#27414) 2023-10-11 04:24:07 +00:00
repo_transfer.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
repo_transfer_test.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00