4 people 53cf53cbbc fix: add missing checks to several handlers and services (#40120) (#40268) ...

Backport #40120 by @silverwind

Several code paths skipped checks their siblings perform, or cleaned up
more than they validated.

- Official team review requests now count, and removing one no longer
marks an unrelated review official
- Release edits only delete files of validated attachments
- Rejected container uploads no longer delete an existing blob
- Attachment removal only removes the uploader's own pending uploads
- OpenID sign-in checks the allow and block lists against the normalized
identifier
- HTTP git access is rejected while a repository is being created, like
SSH

Signed-off-by: silverwind <me@silverwind.io>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-11-07 10:51:18 +00:00

..

assignees_test.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

assignees.go

fix(db): make paginated database reads always require "order" option (#39017)

2026-08-23 08:18:18 +00:00

comment_code.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

comment_list.go

fix(issues): don't render team review requests as Ghost (#39416)

2026-09-24 19:01:34 +00:00

comment_test.go

fix(issues): don't render team review requests as Ghost (#39416)

2026-09-24 19:01:34 +00:00

comment.go

fix(pull): keep review body in sync when its comment is edited (#40058) (#40133)

2026-10-31 18:21:03 +01:00

content_history_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

content_history.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

dependency_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

dependency.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_index.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_label_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_label.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_list_test.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

issue_list.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

issue_lock.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_pin.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_project_multi_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_project.go

feat(api): add project APIs (#38691)

2026-08-08 13:53:28 +00:00

issue_search.go

perf: speed up the issue and pull request dashboards and fix table indices (#40001) (#40096)

2026-10-31 07:38:45 +00:00

issue_stats.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_update_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

issue_update.go

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

issue_user_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_user.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_watch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_watch.go

chore: fix repo watch (#38921)

2026-08-16 03:00:59 +00:00

issue_xref_test.go

enhance: allow auto-closing PRs from PRs (#39393)

2026-09-25 11:35:13 +00:00

issue_xref.go

enhance: allow auto-closing PRs from PRs (#39393)

2026-09-25 11:35:13 +00:00

issue.go

perf: speed up repository issue and pull request lists (#40114) (#40132)

2026-10-31 18:24:15 +01:00

label_test.go

fix: correct label deletion and release attachment load (#39743) (#39752)

2026-10-13 00:53:02 +00:00

label.go

fix: correct label deletion and release attachment load (#39743) (#39752)

2026-10-13 00:53:02 +00:00

main_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

milestone_list.go

enhance(project): filter project milestones by linked issues (#39958) (#39984)

2026-10-24 06:24:46 +00:00

milestone_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

milestone.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_list_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_list.go

perf: speed up repository issue and pull request lists (#40114) (#40132)

2026-10-31 18:24:15 +01:00

pull_test.go

fix(pull): respect max approvers in default merge message (#40118) (#40119)

2026-10-31 15:07:42 +00:00

pull.go

fix(pull): respect max approvers in default merge message (#40118) (#40119)

2026-10-31 15:07:42 +00:00

reaction.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

review_list.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

review_test.go

fix: add missing checks to several handlers and services (#40120) (#40268)

2026-11-07 10:51:18 +00:00

review.go

fix: add missing checks to several handlers and services (#40120) (#40268)

2026-11-07 10:51:18 +00:00

stopwatch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

stopwatch.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

tracked_time_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

tracked_time.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00