Fail when API & web endpoints use unrelated ids#28212

Closed

earl-warren wants to merge 16 commits intogo-gitea:release/v1.21from earl-warren:wip-gitea-v1.21-security

+158-8

Commits on Nov 25, 2023

enforce reqRepoReader(unit.TypeIssues) GET /repos/{owner}/{repo}/issues/pinned

Loïc Dachary
authored and
earl-warren
committed
enforce reqRepoReader(unit.TypeIssues) POST /repos/{owner}/{repo}/issues

Loïc Dachary
authored and
earl-warren
committed
fix API usage of a PR index in place of issue index and vice versa

Loïc Dachary
authored and
earl-warren
committed
fix PATCH /api/v1/repos/{owner}/{repo}/issues/comments/{id}

Loïc Dachary
authored and
earl-warren
committed
fix {DELETE,POST} /repos/{owner}/{repo}/issues/comments/{id}/reactions

Loïc Dachary
authored and
earl-warren
committed
fix GET /repos/{owner}/{repo}/issues/comments/{id}/reactions

Loïc Dachary
authored and
earl-warren
committed
fix DELETE /api/v1/repos/{owner}/{repo}/issues/comments/{id}

Loïc Dachary
authored and
earl-warren
committed
fix POST /{owner}/{repo}/comments/{id}/delete

Loïc Dachary
authored and
earl-warren
committed
fix POST /{owner}/{repo}/comments/{id}

Loïc Dachary
authored and
earl-warren
committed
fix POST /{owner}/{repo}/comments/{id}/reactions/{action}

Loïc Dachary
authored and
earl-warren
committed
fix GET /{owner}/{repo}/comments/{id}/attachments

Loïc Dachary
authored and
earl-warren
committed
fix POST /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/soft-delete

Loïc Dachary
authored and
earl-warren
committed
fix GET /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/detail

Loïc Dachary
authored and
earl-warren
committed
fix POST /{username}/{reponame}/{tags,release}/delete

Loïc Dachary
authored and
earl-warren
committed
fix GET /api/v1/repos/{owner}/{repo}/keys/{id}

Loïc Dachary
authored and
earl-warren
committed
fix POST /{username}/{reponame}/{type:issues|pulls}/move_pin

Loïc Dachary
authored and
earl-warren
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fail when API & web endpoints use unrelated ids#28212

Commits on Nov 25, 2023

enforce reqRepoReader(unit.TypeIssues) GET /repos/{owner}/{repo}/issues/pinned

enforce reqRepoReader(unit.TypeIssues) POST /repos/{owner}/{repo}/issues

fix API usage of a PR index in place of issue index and vice versa

fix PATCH /api/v1/repos/{owner}/{repo}/issues/comments/{id}

fix {DELETE,POST} /repos/{owner}/{repo}/issues/comments/{id}/reactions

fix GET /repos/{owner}/{repo}/issues/comments/{id}/reactions

fix DELETE /api/v1/repos/{owner}/{repo}/issues/comments/{id}

fix POST /{owner}/{repo}/comments/{id}/delete

fix POST /{owner}/{repo}/comments/{id}

fix POST /{owner}/{repo}/comments/{id}/reactions/{action}

fix GET /{owner}/{repo}/comments/{id}/attachments

fix POST /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/soft-delete

fix GET /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/detail

fix POST /{username}/{reponame}/{tags,release}/delete

fix GET /api/v1/repos/{owner}/{repo}/keys/{id}

fix POST /{username}/{reponame}/{type:issues|pulls}/move_pin