Sai Asish Y 6826321570 feat(security): set X-Content-Type-Options: nosniff by default (#37354) ...

Fixes #37316.

---------

Signed-off-by: SAY-5 <SAY-5@users.noreply.github.com>
Co-authored-by: SAY-5 <SAY-5@users.noreply.github.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-04-24 11:21:34 +00:00

..

actions

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

analyze

…

assetfs

Fix theme discovery and Vite dev server in dev mode (#37033)

2026-03-30 14:59:10 +00:00

auth

Update Go dependencies (#36781)

2026-04-01 11:26:52 +08:00

avatar

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

badge

…

base

…

cache

…

cachegroup

…

charset

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

commitstatus

Update Combine method to treat warnings as failures and adjust tests (#37048)

2026-03-31 17:22:18 +00:00

container

…

csv

…

dump

fix: dump with default zip type produces uncompressed zip (#37401)

2026-04-24 14:35:15 +08:00

emoji

…

eventsource

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

fileicon

…

generate

Remove error returns from crypto random helpers and callers (#37240)

2026-04-17 00:59:26 +08:00

git

Refactor pull request view (1) (#37380)

2026-04-24 10:24:41 +00:00

gitrepo

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

glob

…

globallock

…

graceful

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

gtprof

…

hcaptcha

…

highlight

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

hostmatcher

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

htmlutil

…

httpcache

…

httplib

Pass ServeHeaderOptions by value instead of pointer, fine tune httplib tests (#36982)

2026-03-25 16:07:59 -07:00

indexer

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

issue/template

…

json

Fix corrupted JSON caused by goccy library (#37214)

2026-04-14 14:00:20 +00:00

label

…

lfs

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

lfstransfer

…

log

…

markup

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

mcaptcha

…

metrics

…

migration

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

nosql

…

optional

…

options

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

packages

Swift registry metadata: preserve more JSON fields and accept empty metadata (#37254)

2026-04-18 04:16:26 +08:00

paginator

…

pprof

…

private

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

process

…

proxy

…

proxyprotocol

…

public

Frontend iframe renderer framework: 3D models, OpenAPI (#37233)

2026-04-17 22:30:17 +00:00

queue

…

recaptcha

Fix URLJoin, markup render link reoslving, sign-in/up/linkaccount page common data (#36861)

2026-03-08 15:57:37 +00:00

references

…

regexplru

…

repository

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

reqctx

…

secret

…

session

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

setting

feat(security): set X-Content-Type-Options: nosniff by default (#37354)

2026-04-24 11:21:34 +00:00

sitemap

…

ssh

…

storage

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

structs

Introduce ActionRunAttempt to represent each execution of a run (#37119)

2026-04-23 23:33:41 +00:00

svg

Add render cache for SVG icons (#36863)

2026-03-10 05:26:16 +00:00

system

…

tailmsg

…

tempdir

…

templates

Fix URL related escaping for oauth2 (#37334)

2026-04-21 23:58:32 +08:00

test

Add form-fetch-action to some forms, fix "fetch action" resp bug (#37305)

2026-04-20 18:58:44 +00:00

testlogger

Refactor LDAP tests (#37274)

2026-04-18 19:32:49 +00:00

timeutil

…

translation

Fix various trivial problems (#36953)

2026-03-23 18:23:42 +00:00

turnstile

…

typesniffer

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

updatechecker

…

uri

…

user

…

util

Fix repo init README EOL (#37388)

2026-04-23 18:33:16 +00:00

validation

Support for Custom URI Schemes in OAuth2 Redirect URIs (#37356)

2026-04-22 21:33:27 +00:00

web

Support for Custom URI Schemes in OAuth2 Redirect URIs (#37356)

2026-04-22 21:33:27 +00:00

webhook

…

zstd

…