gitea/services
wxiaoguang 20ae184967
Only allow webhook to send requests to allowed hosts (#17482) (#17510)
Backport #17482

* Only allow webhook to send requests to allowed hosts (backport #17482)

* use ALLOWED_HOST_LIST=* for default to keep the legacy behavior in 1.15.x
2021-11-06 09:23:43 +00:00
..
archiver correct transaction ending (#17151) 2021-09-25 16:45:39 +01:00
auth Allow BASIC authentication access to /:owner/:repo/releases/download/* (#16916) (#16923) 2021-09-02 12:34:49 -04:00
comments Enhance Ghost comment mitigation Settings (#14392) 2021-01-21 21:56:19 -05:00
externalaccount Allow externalID to be UUID (#8551) 2019-10-17 10:06:28 +08:00
forms Add option to provide signature for a token to verify key ownership (#14054) 2021-07-13 15:28:07 +02:00
gitdiff Prevent NPE in CSV diff rendering when column removed (#17018) (#17377) 2021-10-20 22:55:34 +02:00
issue Fix various documentation, user-facing, and source comment typos (#16367) 2021-07-08 13:38:13 +02:00
lfs Test if LFS object is accessible (#16865) (#16904) 2021-08-31 17:58:39 +02:00
mailer Fix missing repo link in issue/pull assigned emails (#17183) (#17184) 2021-09-30 01:21:12 +02:00
mirror Add push to remote mirror repository (#15157) 2021-06-14 19:20:43 +02:00
pull Fix dump and restore respository (#16698) (#16898) 2021-08-31 10:44:14 +01:00
release Fix dump and restore respository (#16698) (#16898) 2021-08-31 10:44:14 +01:00
repository Implemented head_commit for webhooks (#16282) 2021-06-29 15:34:03 +02:00
webhook Only allow webhook to send requests to allowed hosts (#17482) (#17510) 2021-11-06 09:23:43 +00:00
wiki Fix 500 on first wiki page (#16586) (#16598) 2021-08-03 23:46:08 +01:00