Giteabot 9c0ad8291b fix: Add missed token scope checking (#37735) (#37757) ...

Backport #37735 by @lunny

Follow #37698

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2026-05-18 06:59:33 +00:00

..

actions

fix(actions): wrong assumption that run id always >= job id (#37737) (#37742)

2026-05-17 08:42:20 +02:00

setting

fix: use consistent GetUser family functions (#37553) (#37589)

2026-05-07 15:43:45 +00:00

activity.go

Address some CodeQL security concerns (#35572)

2025-10-04 01:21:26 +08:00

attachment.go

fix(web): enforce token scopes on raw, media, and attachment downloads (#37698) (#37733)

2026-05-16 18:18:44 +02:00

blame.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542) (#37585)

2026-05-07 16:22:09 +00:00

branch.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

code_frequency.go

Hide activity contributors, recent commits and code frequrency left tabs if there is no code permission (#34053)

2025-03-28 21:04:40 -07:00

commit.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

common_recentbranches.go

Fix issue label deletion with Actions tokens (#37013)

2026-03-29 09:21:14 +00:00

compare_test.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542) (#37585)

2026-05-07 16:22:09 +00:00

compare.go

Compare dropdown fails when selecting branch with no common merge-base (#37470) (#37472)

2026-05-08 19:08:36 +00:00

contributors.go

Fix incorrect ref commit ID usage (#33331)

2025-01-20 07:43:49 +00:00

download.go

fix(web): enforce token scopes on raw, media, and attachment downloads (#37698) (#37733)

2026-05-16 18:18:44 +02:00

editor_apply_patch.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

editor_cherry_pick.go

Refactor GetRepoRawDiffForFile to avoid unnecessary pipe or goroutine (#36434)

2026-01-23 02:10:11 +00:00

editor_error.go

Honor delete branch on merge repo setting when using merge API (#35488)

2025-10-22 05:06:56 +00:00

editor_fork.go

Edit file workflow for creating a fork and proposing changes (#34240)

2025-06-22 12:43:43 +00:00

editor_preview.go

Use full-file highlighting for diff sections (#36561)

2026-02-10 03:29:28 +00:00

editor_test.go

Remove wrong "git.DefaultContext" (#35364)

2025-08-27 16:31:21 +00:00

editor_uploader.go

fix attachment file size limit in server backend (#35519)

2025-10-21 15:07:11 +00:00

editor_util.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

editor.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

fork.go

Edit file workflow for creating a fork and proposing changes (#34240)

2025-06-22 12:43:43 +00:00

githttp_test.go

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

githttp.go

fix(security): enforce wiki git writes and LFS token access at request time (#37695) (#37714)

2026-05-16 06:58:28 +00:00

helper.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

issue_comment.go

Fix various problems (#37129)

2026-04-08 01:17:05 +08:00

issue_content_history.go

fix(repo): unify DEFAULT_SHOW_FULL_NAME output in templates and dropdown (#36597)

2026-03-04 21:23:17 +08:00

issue_dependency.go

Fix issue label deletion with Actions tokens (#37013)

2026-03-29 09:21:14 +00:00

issue_label_test.go

Validate hex colors when creating/editing labels (#34623)

2025-06-07 11:25:08 +03:00

issue_label.go

Validate hex colors when creating/editing labels (#34623)

2025-06-07 11:25:08 +03:00

issue_list.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

issue_lock.go

Add API routes to lock and unlock issues (#34165)

2025-04-21 00:43:43 +00:00

issue_new.go

Refactor issue sidebar and fix various problems (#37045)

2026-03-31 10:03:52 +08:00

issue_page_meta.go

Refactor issue sidebar and fix various problems (#37045)

2026-03-31 10:03:52 +08:00

issue_pin.go

Move issue pin to an standalone table for querying performance (#33452)

2025-02-17 11:28:37 -08:00

issue_poster.go

fix(repo): unify DEFAULT_SHOW_FULL_NAME output in templates and dropdown (#36597)

2026-03-04 21:23:17 +08:00

issue_stopwatch.go

fix(issue): Replace stopwatch toggle with explicit start/stop actions (#34818)

2025-06-25 07:22:58 +08:00

issue_suggestions.go

Rework suggestion backend (#33538)

2025-02-10 16:24:05 +00:00

issue_test.go

…

issue_timetrack.go

Fix track time issue id (#36664)

2026-02-20 21:48:54 +00:00

issue_view.go

Fix issue label deletion with Actions tokens (#37013)

2026-03-29 09:21:14 +00:00

issue_watch.go

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

issue.go

Load mentionValues asynchronously (#36739)

2026-03-07 12:37:37 -08:00

main_test.go

…

mention.go

Load mentionValues asynchronously (#36739)

2026-03-07 12:37:37 -08:00

middlewares_test.go

Fix diff view style handling (#36324)

2026-01-09 04:37:16 +00:00

middlewares.go

Fix diff view style handling (#36324)

2026-01-09 04:37:16 +00:00

migrate.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

milestone.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

packages.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

projects_test.go

Clarify path param naming (#32969)

2024-12-24 13:47:45 +00:00

projects.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

pull_review_test.go

Refactor template render (#36438)

2026-01-24 05:11:49 +00:00

pull_review.go

Fix incorrect viewed files counter if file has changed (#36009)

2025-11-27 14:02:03 +00:00

pull.go

Compare dropdown fails when selecting branch with no common merge-base (#37470) (#37472)

2026-05-08 19:08:36 +00:00

recent_commits.go

Hide activity contributors, recent commits and code frequrency left tabs if there is no code permission (#34053)

2025-03-28 21:04:40 -07:00

release_test.go

Move commit related functions to gitrepo package (#35600)

2025-12-05 00:20:23 +00:00

release.go

Make GetPossibleUserByID can handle deleted user (#37430) (#37431)

2026-04-27 00:33:09 +08:00

render.go

Frontend iframe renderer framework: 3D models, OpenAPI (#37233) (#37273)

2026-04-18 16:02:18 +08:00

repo.go

fix: Add missed token scope checking (#37735) (#37757)

2026-05-18 06:59:33 +00:00

search.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

star.go

Refactor web route handler (#33488)

2025-02-05 02:14:03 +08:00

topic.go

…

transfer.go

Refactor web route handler (#33488)

2025-02-05 02:14:03 +08:00

treelist_test.go

fix some file icon ui (#36078)

2025-12-04 19:47:23 +01:00

treelist.go

Refactor ls-tree and git path related problems (#35858)

2025-11-05 17:48:38 +00:00

view_file.go

Frontend iframe renderer framework: 3D models, OpenAPI (#37233) (#37273)

2026-04-18 16:02:18 +08:00

view_home_test.go

Fix repo file list partial reloading for submodules (#35183)

2025-07-31 09:34:51 +08:00

view_home.go

Instance-wide (global) info banner and maintenance mode (#36571)

2026-02-26 23:16:11 +08:00

view_readme_test.go

Fix README symlink resolution in subdirectories like .github (#36775)

2026-03-01 05:33:08 +00:00

view_readme.go

Frontend iframe renderer framework: 3D models, OpenAPI (#37233) (#37273)

2026-04-18 16:02:18 +08:00

view_test.go

…

view.go

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

watch.go

Refactor web route handler (#33488)

2025-02-05 02:14:03 +08:00

webgit.go

Support choose email when creating a commit via web UI (more) (#33445)

2025-01-31 02:36:18 +00:00

wiki_test.go

Move HasWiki to repository service package (#33912)

2025-09-01 11:12:58 -07:00

wiki.go

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00