Giteabot ca4418eff1 Support allowed hosts for webhook to work with proxy (#27655) (#27674) ... Backport #27655 by @wolfogre When `webhook.PROXY_URL` has been set, the old code will check if the proxy host is in `ALLOWED_HOST_LIST` or reject requests through the proxy. It requires users to add the proxy host to `ALLOWED_HOST_LIST`. However, it actually allows all requests to any port on the host, when the proxy host is probably an internal address. But things may be even worse. `ALLOWED_HOST_LIST` doesn't really work when requests are sent to the allowed proxy, and the proxy could forward them to any hosts. This PR fixes it by: - If the proxy has been set, always allow connectioins to the host and port. - Check `ALLOWED_HOST_LIST` before forwarding. Co-authored-by: Jason Song <i@wolfogre.com>		2023-10-18 15:07:20 +02:00
..
actions	Fix activity type match in matchPullRequestEvent (#25746) (#25796)	2023-07-11 06:42:07 +00:00
activitypub	Add Chef package registry (#22554)	2023-02-06 09:49:21 +08:00
analyze	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
assetfs	Skip unuseful error message in dev mode when watching local filesystem (#25919) (#25927)	2023-07-17 10:26:29 +00:00
auth	Use a general approach to access custom/static/builtin assets (#24022)	2023-04-12 18:16:45 +08:00
avatar	Improve avatar uploading / resizing / compressing, remove Fomantic card module (#24653)	2023-05-13 20:59:11 +02:00
base	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
cache	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
charset	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
container	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
context	Avoid double-unescaping of form value (#26853) (#26863)	2023-09-01 21:15:00 +08:00
csv	Refactor locale number (#24134)	2023-04-17 11:37:23 +08:00
doctor	fix orphan check for deleted branch (#27310) (#27320)	2023-09-28 11:16:05 +08:00
emoji	Fix unstable emoji sort (#22346)	2023-01-05 13:58:51 +02:00
eventsource	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
generate	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
git	Fix git 2.11 error when checking IsEmpty (#27393) (#27396)	2023-10-02 23:30:04 +08:00
gitgraph	Add context cache as a request level cache (#22294)	2023-02-15 21:37:34 +08:00
graceful	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
hcaptcha	Consume hcaptcha and pwn deps (#22610)	2023-01-29 09:49:51 -06:00
highlight	test_env: hardcode major go version in use (#23464)	2023-03-14 16:09:01 -04:00
hostmatcher	Support allowed hosts for webhook to work with proxy (#27655) (#27674)	2023-10-18 15:07:20 +02:00
html	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
httpcache	Use standard HTTP library to serve files (#24693)	2023-05-13 16:04:57 +02:00
httplib	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
indexer	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
issue/template	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
json	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
label	Make label templates have consistent behavior and priority (#23749)	2023-04-10 16:44:02 +08:00
lfs	Rewrite logger system (#24726)	2023-05-21 22:35:11 +00:00
log	Use stderr as fallback if the log file can't be opened (#26074) (#26083)	2023-07-24 05:58:16 +00:00
markup	Disallow dangerous URL schemes (#25960) (#25964)	2023-07-18 19:48:52 +00:00
mcaptcha	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
metrics	Use a separate admin page to show global stats, remove actions stat (#25062)	2023-06-03 22:03:41 +08:00
migration	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
mirror	Improve queue and logger context (#24924)	2023-05-26 07:31:55 +00:00
nosql	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
notification	Load reviewer before sending notification (#27063) (#27064)	2023-09-13 15:32:58 -05:00
options	Use a general approach to access custom/static/builtin assets (#24022)	2023-04-12 18:16:45 +08:00
packages	Use docs.gitea.com instead of docs.gitea.io (#26769)	2023-08-28 19:58:16 +08:00
paginator	Use more specific test methods (#24265)	2023-04-22 17:56:27 -04:00
pprof	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
private	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
process	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
proxy	Use proxy for pull mirror (#22771)	2023-02-11 08:39:50 +08:00
proxyprotocol	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
public	Use standard HTTP library to serve files (#24693)	2023-05-13 16:04:57 +02:00
queue	Calculate MAX_WORKERS default value by CPU number (#26177) (#26183)	2023-07-27 19:24:07 +08:00
recaptcha	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
references	Use correct captured group range when parsing cross-reference (#22672)	2023-01-31 10:08:05 +01:00
regexplru	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
repository	Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)	2023-09-13 15:15:00 +08:00
secret	Improve decryption failure message (#24573)	2023-05-07 19:29:43 +08:00
session	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
setting	Use secure cookie for HTTPS sites (#26999) (#27013)	2023-09-11 09:59:00 +00:00
sitemap	Fix sitemap (#22272)	2022-12-30 23:31:00 +08:00
ssh	Fix admin queue page title and fix CI failures (#26409) (#26421)	2023-08-10 11:04:48 +02:00
storage	Use correct minio error (#26634) (#26639)	2023-08-21 16:51:30 +00:00
structs	Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27249)	2023-09-25 07:02:08 +00:00
svg	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
sync	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
system	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
templates	Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)	2023-09-13 15:15:00 +08:00
test	Fix incorrect CLI exit code and duplicate error message (#26346) (#26347)	2023-08-05 23:37:04 +08:00
testlogger	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
timeutil	Fix incorrect webhook time and use relative-time to display it (#24477)	2023-05-03 19:53:43 -04:00
translation	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
turnstile	Add new captcha: cloudflare turnstile (#22369)	2023-02-05 15:29:03 +08:00
typesniffer	Detect ogg mime-type as audio or video (#26494) (#26505)	2023-08-15 11:15:26 +08:00
updatechecker	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
upload	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
uri	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
user	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
util	Replace interface{} with any (#25686) (#25687)	2023-07-04 23:41:32 -04:00
validation	check blocklist for emails when adding them to account (#26812) (#26831)	2023-08-31 00:52:19 +00:00
web	Fix incorrect router logger (#26137) (#26143)	2023-07-26 08:37:43 +08:00
webhook	New webhook trigger for receiving Pull Request review requests (#24481)	2023-05-24 22:06:27 -04:00