forgejo/models
Gusted a8c7bbf728
[GITEA] Use restricted sanitizer for repository description
- Currently the repository description uses the same sanitizer as a
normal markdown document. This means that element such as heading and
images are allowed and can be abused.
- Create a minimal restricted sanitizer for the repository description,
which only allows what the postprocessor currently allows, which are
links and emojis.
- Added unit testing.
- Resolves https://codeberg.org/forgejo/forgejo/issues/1202
- Resolves https://codeberg.org/Codeberg/Community/issues/1122

(cherry picked from commit a8afa4cd18)
(cherry picked from commit 0238587c51)
2023-09-25 20:44:13 +02:00
..
actions [CLI] implement forgejo-cli 2023-09-25 15:24:38 +02:00
activities Quote table release in sql queries (#27205) 2023-09-23 12:57:39 +00:00
admin Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
asymkey Reduce usage of db.DefaultContext (#27073) 2023-09-14 17:09:32 +00:00
auth [GITEA] silently ignore obsolete sudo scope 2023-09-25 20:28:30 +02:00
avatars Fix context cache bug & enable context cache for dashabord commits' authors (#26991) 2023-09-11 10:14:01 +00:00
db [GITEA] Add slow SQL query warning 2023-09-25 20:43:17 +02:00
dbfs Fix content holes in Actions task logs file (#25560) 2023-06-28 19:07:29 +02:00
fixtures [GITEA] Improve HTML title on repositories 2023-09-25 20:43:07 +02:00
forgejo/semver [UPGRADE] add sanity checks for [storage*] 2023-09-25 16:02:39 +02:00
forgejo_migrations [SEMVER] store SemVer in ForgejoSemVer after a database upgrade 2023-09-25 16:02:39 +02:00
git Updates to the API for archived repos (#27149) 2023-09-21 23:43:29 +00:00
issues [GITEA] enable system users for comment.LoadPoster 2023-09-25 20:44:13 +02:00
migrations [UPGRADE] run sanity checks before the database is upgraded 2023-09-25 16:02:39 +02:00
organization Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
packages move repository deletion to service layer (#26948) 2023-09-08 04:51:15 +00:00
perm move repository deletion to service layer (#26948) 2023-09-08 04:51:15 +00:00
project Refactor project templates (#26448) 2023-08-12 10:30:28 +00:00
pull refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
repo [GITEA] Use restricted sanitizer for repository description 2023-09-25 20:44:13 +02:00
secret Refactor secrets modification logic (#26873) 2023-09-05 15:21:02 +00:00
shared/types Display owner of a runner as a tooltip instead of static text (#24377) 2023-05-12 08:43:27 +00:00
system Fix context cache bug & enable context cache for dashabord commits' authors (#26991) 2023-09-11 10:14:01 +00:00
unit Use Set[Type] instead of map[Type]bool/struct{}. (#26804) 2023-08-30 06:55:25 +00:00
unittest Replace interface{} with any (#25686) 2023-07-04 18:36:08 +00:00
user [GITEA] enable system users search via the API 2023-09-25 20:44:13 +02:00
webhook Replace interface{} with any (#25686) 2023-07-04 18:36:08 +00:00
error.go Sync branches into databases (#22743) 2023-06-29 10:03:20 +00:00
fixture_generation.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
fixture_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
main_test.go move repository deletion to service layer (#26948) 2023-09-08 04:51:15 +00:00
org.go refactor some functions to support ctx as first parameter (#21878) 2022-12-03 10:48:26 +08:00
org_team.go Use db.WithTx for AddTeamMember to avoid ctx abuse (#27095) 2023-09-16 12:54:23 +00:00
org_team_test.go Reduce usage of db.DefaultContext (#27073) 2023-09-14 17:09:32 +00:00
org_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
repo.go move repository deletion to service layer (#26948) 2023-09-08 04:51:15 +00:00
repo_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
repo_transfer.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00
repo_transfer_test.go Next round of db.DefaultContext refactor (#27089) 2023-09-16 14:39:12 +00:00