forgejo/modules
Gusted f5af5050b3
[GITEA] Use restricted sanitizer for repository description
- Currently the repository description uses the same sanitizer as a
normal markdown document. This means that element such as heading and
images are allowed and can be abused.
- Create a minimal restricted sanitizer for the repository description,
which only allows what the postprocessor currently allows, which are
links and emojis.
- Added unit testing.
- Resolves https://codeberg.org/forgejo/forgejo/issues/1202
- Resolves https://codeberg.org/Codeberg/Community/issues/1122

(cherry picked from commit a8afa4cd18)
(cherry picked from commit 0238587c51)
(cherry picked from commit a8c7bbf728)
(cherry picked from commit 80e05a8245)
2023-10-09 20:44:24 +02:00
..
actions [CI] Search .forgejo/workflows first 2023-10-09 18:25:28 +02:00
activitypub make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
analyze
assetfs
auth [SECURITY] default to pbkdf2 with 320,000 iterations 2023-10-09 19:11:02 +02:00
avatar
base
cache
charset
container
context Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
contexttest
csv
doctor Even more db.DefaultContext refactor (#27352) 2023-10-03 10:30:41 +00:00
emoji
eventsource More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
generate
git Remove redundant len check around loop (#27464) 2023-10-06 14:49:37 +08:00
gitgraph More db.DefaultContext refactor (#27265) 2023-09-29 12:12:54 +00:00
graceful
hcaptcha
highlight
hostmatcher
html
httpcache
httplib
indexer [CI] disable meilisearch/elasticsearch test, no server yet in CI 2023-10-09 18:25:28 +02:00
issue/template
json
label
lfs
log
markup [GITEA] Use restricted sanitizer for repository description 2023-10-09 20:44:24 +02:00
mcaptcha
metrics
migration
nosql
options
packages
paginator
pprof
private [CLI] implement forgejo-cli 2023-10-09 17:15:31 +02:00
process
proxy
proxyprotocol
public
queue [CI] disable redis test, no redis server yet in CI 2023-10-09 17:15:31 +02:00
recaptcha
references
regexplru
repository Refactor system setting (#27000) 2023-10-05 09:08:19 +08:00
secret
session
setting [GITEA] notifies admins on new user registration 2023-10-09 20:44:20 +02:00
sitemap
ssh
storage [CI] Forgejo Actions based CI for PR & branches 2023-10-09 18:25:28 +02:00
structs [v1.22] [FEAT] allow setting the update date on issues and comments 2023-10-09 19:11:03 +02:00
svg
sync
system make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
templates Improve feed icons and feed merge text color (#27498) 2023-10-07 23:26:27 +00:00
test
testlogger
timeutil
translation
turnstile
typesniffer
updatechecker
upload
uri
user
util
validation [GITEA] add option for banning dots in usernames 2023-10-09 20:25:23 +02:00
web [GITEA] add option for banning dots in usernames 2023-10-09 20:25:23 +02:00
webhook