forgejo/routers/web
Gusted 5488ec7d96
security: add permission check to 'delete branch after merge'
- Add a permission check that the doer has write permissions to the head
repository if the the 'delete branch after merge' is enabled when
merging a pull request.
- Unify the checks in the web and API router to `DeleteBranchAfterMerge`.
- Added integration tests.

(cherry picked from commit 266e0b2ce9)

Conflicts:
	tests/integration/pull_merge_test.go
  trivial context conflict
2024-10-28 06:32:10 +01:00
..
admin enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
auth add CfTurnstileSitekey context data to all captcha templates (#31874) (#31876) 2024-08-25 17:41:08 +02:00
devtest Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
events Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
explore Repository explore alphabetically order respect owner name (#30882) 2024-05-14 15:31:36 +02:00
feed Teach activities.GetFeeds() how to avoid returning duplicates 2024-05-09 18:37:30 +00:00
healthcheck Add health-check test 2024-04-06 08:44:23 +00:00
misc Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
org Add missed return after ctx.ServerError (#31130) (#31133) 2024-05-31 14:35:19 +02:00
repo security: add permission check to 'delete branch after merge' 2024-10-28 06:32:10 +01:00
shared Fix various problems around projects board view (#30696) 2024-05-14 15:51:15 +02:00
user enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
base.go Fix panic in storageHandler (#27446) 2023-10-06 13:23:14 +00:00
githttp.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
goget.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
home.go migrate some more "OptionalBool" to "Option[bool]" (#29479) 2024-03-06 12:10:44 +08:00
metrics.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
nodeinfo.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
swagger_json.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
web.go Move reverproxyauth before session so the header will not be ignored even if user has login (#27821) (#30948) 2024-05-14 16:17:23 +02:00
webfinger.go fix: respond with JSON Resource Descriptor Content-Type per RFC7033 2024-04-02 09:41:57 +00:00