zeripath c0bbbdd30b Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272) ...

* Add CSRF checking to reqToken and place CSRF in the post for deadline creation

Fixes #5226, #5249

* /api/v1/admin/users routes should have reqToken middleware

2018-11-04 10:42:15 -05:00

..

auth

Add comment replies (#5147)

2018-10-23 10:38:06 -04:00

avatar

…

base

Detect charset and convert non UTF-8 files for display (#4950)

2018-09-29 16:33:54 +08:00

cache

…

context

Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272)

2018-11-04 10:42:15 -05:00

cron

…

generate

…

highlight

…

httplib

…

indexer

Global code search support (#3664)

2018-03-16 22:04:33 +08:00

lfs

add valid for lfs oid (#4461)

2018-07-19 11:39:19 -04:00

log

…

mailer

…

markup

Upgrade images in .drone.yml to more recent versions (#4819)

2018-08-29 09:43:58 -04:00

minwinsvc

…

notification

…

options

…

pprof

cmd/serve: pprof cpu and memory profile dumps to disk (#4560)

2018-08-07 14:49:18 -04:00

private

…

process

…

public

…

recaptcha

Add Recaptcha functionality to Gitea (#4044)

2018-07-05 00:13:05 -04:00

search

Global code search support (#3664)

2018-03-16 22:04:33 +08:00

setting

Fix: Let's Encrypt configuration settings (#4911)

2018-09-12 00:06:44 -04:00

ssh

…

sync

…

templates

Detect charset and convert non UTF-8 files for display (#4950)

2018-09-29 16:33:54 +08:00

test

API endpoint for testing webhook (#3550)

2018-04-29 14:21:33 +08:00

user

…

util

Fix open redirect vulnerability on login screen (#4312)

2018-06-26 22:45:18 +08:00

validation

Improve URL validation for external wiki and external issues (#4710)

2018-08-15 09:29:37 +03:00