silverwind 8936303510 fix: add missing checks to several API and web handlers (#39501) ...

Several handlers skipped checks that their sibling routes or settings already enforce. This brings them in line.

- Push mirror API honors `DISABLE_NEW_PUSH` and checks the caller's permission
- Media API serves small files with the usual content headers
- Issue attachment API ignores comment attachments
- Push-to-create respects `FORCE_PRIVATE`
- Profile feeds and follow actions respect `ENABLE_FEED` and owner visibility
- Tag delete route refuses release tags
- Refresh token grant only accepts refresh tokens
- Gitea migrations bound the source's page size

Co-authored-by: bircni <bircni@icloud.com>

2026-09-30 20:25:14 +02:00

..

_mock_data

refactor: replace AWS SDK with a REST client for CodeCommit migration (#39330)

2026-09-17 09:58:05 +00:00

codebase_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

codebase.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

codecommit_test.go

refactor: replace AWS SDK with a REST client for CodeCommit migration (#39330)

2026-09-17 09:58:05 +00:00

codecommit.go

refactor: replace AWS SDK with a REST client for CodeCommit migration (#39330)

2026-09-17 09:58:05 +00:00

common.go

fix(migrations): preserve SHA-256 pull request commit IDs (#39343)

2026-09-19 12:41:41 +00:00

dump.go

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

error.go

chore(deps): update dependencies (#39367)

2026-09-21 12:23:03 -04:00

git.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gitbucket.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gitea_downloader_test.go

fix: add missing checks to several API and web handlers (#39501)

2026-09-30 20:25:14 +02:00

gitea_downloader.go

fix: add missing checks to several API and web handlers (#39501)

2026-09-30 20:25:14 +02:00

gitea_uploader_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gitea_uploader.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

github_test.go

chore(deps): update dependencies (#39367)

2026-09-21 12:23:03 -04:00

github.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

gitlab_test.go

chore(deps): update dependencies (#39306)

2026-09-14 13:18:00 +00:00

gitlab.go

chore(deps): update dependencies (#39306)

2026-09-14 13:18:00 +00:00

gogs_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

gogs.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

http_client.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

main_test.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

migrate_test.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

migrate.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

onedev_test.go

fix(migrations): bound OneDev version responses (#39024)

2026-08-22 00:54:20 +00:00

onedev.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

restore_test.go

fix(security): harden access checks and migration validation (#38324)

2026-07-10 19:30:43 +02:00

restore.go

fix(security): harden access checks and migration validation (#38324)

2026-07-10 19:30:43 +02:00

update.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00