silverwindandBasavaraj S m 8cf0f9798f fix(feed): require code read access for the repo home branch feed (#39964) (#40067) ...

Backport https://github.com/go-gitea/gitea/pull/39964

The repo home URL served the branch or file commit feed for RSS or Atom
`Accept` headers without the code unit check of the explicit
`/rss/branch/*` routes, exposing commit messages and authors to users
without code access.

Co-authored-by: Basavaraj S m <basavaraj@digiscrypt.com>

2026-10-29 10:04:51 +00:00

..

actions

fix(actions): harden log cursor, activity type and actor filter handling (#39721) (#39731)

2026-10-10 20:23:39 +00:00

setting

enhance: improve issue-pattern capture groups and support both internal&external trackers enabled (#39354)

2026-09-18 08:53:45 -07:00

activity.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

attachment.go

fix(attachments): enforce owning repository path (#39048)

2026-08-24 17:32:23 +00:00

blame.go

fix(repo): use the viewed ref's editorconfig in file view, blame and editor (#39973) (#40019)

2026-10-26 22:39:01 +00:00

branch.go

fix(repo): surface unrelated histories on Sync Fork (#39258)

2026-09-17 12:25:43 +00:00

code_frequency.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

commit.go

enhance: improve commit page header (#39229)

2026-09-06 11:27:04 +02:00

common_recentbranches.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

compare_test.go

fix(pulls): add branch-name option for DEFAULT_TITLE_SOURCE (#38356)

2026-07-07 07:08:05 +00:00

compare.go

fix: restore owner name in PR target branch selector (#39262)

2026-09-08 15:34:49 +00:00

contributors.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

download.go

refactor: remove Ctx field from git.Repository (#38500)

2026-07-17 18:44:31 +08:00

editor_apply_patch.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

editor_cherry_pick.go

refactor: make git package handle all git operations (#38543)

2026-07-20 16:07:38 +00:00

editor_error.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

editor_fork.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

editor_preview.go

refactor: remove Ctx field from git.Repository (#38500)

2026-07-17 18:44:31 +08:00

editor_test.go

chore: still keep ctx in git.Repository struct for cat-file batch command (#38684)

2026-07-28 17:04:22 +00:00

editor_uploader.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

editor_util.go

refactor: make git package handle all git operations (#38543)

2026-07-20 16:07:38 +00:00

editor.go

fix(web): populate the reason for "cannot commit to branch" in web editor commit form (#39155)

2026-08-28 21:46:58 +00:00

fork.go

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

githttp.go

refactor: make git http respond error message (#39390)

2026-09-23 08:51:58 +00:00

helper.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_comment.go

fix: add missing checks to several handlers and models (#39839) (#39847)

2026-10-18 19:50:36 +02:00

issue_content_history_test.go

fix(web): normalize content for edit history diff and fix comment history dropdown (#39616) (#39627)

2026-10-06 08:57:59 +00:00

issue_content_history.go

fix(web): normalize content for edit history diff and fix comment history dropdown (#39616) (#39627)

2026-10-06 08:57:59 +00:00

issue_dependency.go

fix(repo): prevent double-write redirect collisions on dependency errors, fix ui (#38627)

2026-07-25 20:39:36 +08:00

issue_label_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_label.go

fix: correct label deletion and release attachment load (#39743) (#39752)

2026-10-13 00:53:02 +00:00

issue_list.go

enhance(project): filter project milestones by linked issues (#39958) (#39984)

2026-10-24 06:24:46 +00:00

issue_lock.go

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

issue_new.go

chore: form binding trim space (#38978)

2026-08-19 12:50:06 +00:00

issue_page_meta.go

fix: allow re-requesting uncounted review approvals (#38988)

2026-09-08 15:59:06 +00:00

issue_pin.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_poster.go

fix: org project view assignee list (#38357)

2026-07-07 14:40:12 +08:00

issue_stopwatch.go

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

issue_suggestions.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_test.go

fix: dedupe issue cross-reference timeline entries (#38881)

2026-09-26 11:31:01 +00:00

issue_timetrack.go

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

issue_view.go

fix: dedupe issue cross-reference timeline entries (#38881)

2026-09-26 11:31:01 +00:00

issue_watch.go

fix: add missing checks to several handlers and models (#39839) (#39847)

2026-10-18 19:50:36 +02:00

issue.go

fix(issue): prevent redirect to external tracker when built-in tracker is enabled (#39997) (#40031)

2026-10-26 19:38:30 +00:00

main_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

mention.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

middlewares_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

middlewares.go

refactor: decouple git.Repository(ctx) from git.Commit & git.Tree (#38464)

2026-07-15 17:30:01 +00:00

migrate.go

fix: classify git failures on stderr, restrict migration failure detail (#39010)

2026-09-15 10:59:34 +02:00

milestone.go

refactor: pagination/pager (#39162)

2026-08-29 08:20:46 +02:00

packages.go

refactor: pagination/pager (#39162)

2026-08-29 08:20:46 +02:00

projects.go

enhance(project): filter project milestones by linked issues (#39958) (#39984)

2026-10-24 06:24:46 +00:00

pull_merge_box.go

feat(actions): support owner-level and global scoped workflows (#38154)

2026-06-28 09:31:35 +00:00

pull_merge_form.go

fix: show "merge" form for empty PR (#39640) (#39645)

2026-10-06 17:49:17 +00:00

pull_review_test.go

fix(repo): commit page fails to render unsigned commits with a different committer (#39381)

2026-09-23 14:34:19 +00:00

pull_review.go

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

pull.go

fix: trace git command correctly (#39520) (#39524)

2026-10-01 10:19:33 +00:00

recent_commits.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

release_test.go

fix: add missing checks to several API and web handlers (#39501) (#39507)

2026-09-30 18:46:59 +00:00

release.go

fix: add missing checks to several API and web handlers (#39501) (#39507)

2026-09-30 18:46:59 +00:00

render.go

refactor: markup render (#38864)

2026-08-11 18:01:02 +02:00

repo.go

fix(web): populate the reason for "cannot commit to branch" in web editor commit form (#39155)

2026-08-28 21:46:58 +00:00

search.go

refactor: pagination/pager (#39162)

2026-08-29 08:20:46 +02:00

star.go

chore: fix repo watch (#38921)

2026-08-16 03:00:59 +00:00

topic.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

transfer.go

chore: fix repo watch (#38921)

2026-08-16 03:00:59 +00:00

treelist_test.go

feat(diff): Add search and extension filter to diff sidebar (#37068)

2026-08-23 18:31:22 +02:00

treelist.go

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

view_file.go

fix(repo): use the viewed ref's editorconfig in file view, blame and editor (#39973) (#40019)

2026-10-26 22:39:01 +00:00

view_home_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

view_home.go

fix(feed): require code read access for the repo home branch feed (#39964) (#40067)

2026-10-29 10:04:51 +00:00

view_readme.go

fix(web): populate the reason for "cannot commit to branch" in web editor commit form (#39155)

2026-08-28 21:46:58 +00:00

view_test.go

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

view.go

chore: fix various problems (#39298)

2026-09-14 22:15:21 +02:00

watch.go

enhance: allow custom watches to bypass on-mention email restriction (#39652) (#39837)

2026-10-18 12:45:52 +00:00

webgit.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

wiki_test.go

refactor: wiki edit form (#38918)

2026-08-14 11:31:23 +02:00

wiki.go

chore: fix various problems (#39298)

2026-09-14 22:15:21 +02:00