3 people 2e317d3f6e Prevent security failure due to bad APP_ID (#18678) (#18682) ...

Backport #18678

WebAuthn may cause a security exception if the provided APP_ID is not allowed for the
current origin. Therefore we should reattempt authentication without the appid
extension.

Also we should allow [u2f] as-well as [U2F] sections.

Signed-off-by: Andrew Thornton <[email protected]>
Co-authored-by: Lunny Xiao <[email protected]>

2022-02-10 16:17:44 +01:00

..

activitypub

…

analyze

…

appstate

…

auth

Support webauthn (#17957)

2022-01-14 16:03:31 +01:00

avatar

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

base

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

cache

Test cache during init (#17852)

2021-12-06 00:24:57 +08:00

charset

Add warning for BIDI characters in page renders and in diffs (#17562)

2022-01-07 02:18:52 +01:00

context

If rendering has failed due to a net.OpError stop rendering (#18642) (#18645)

2022-02-07 09:25:05 +08:00

convert

Add MirrorUpdated field to Repository API type (#18267)

2022-01-18 13:18:30 +00:00

csv

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

doctor

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

emoji

…

eventsource

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

generate

Support webauthn (#17957)

2022-01-14 16:03:31 +01:00

git

Stop logging an error when notes are not found (#18626) (#18635)

2022-02-06 09:43:15 +00:00

gitgraph

Collaborator trust model should trust collaborators (#18539) (#18557)

2022-02-03 11:20:37 -05:00

graceful

Make SSL cipher suite configurable (#17440)

2021-11-20 01:12:43 -05:00

hcaptcha

…

highlight

Add .gitattribute assisted language detection to blame, diff and render (#17590)

2021-11-17 20:37:00 +00:00

hostmatcher

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

httpcache

…

httplib

…

indexer

Upgrade bleve from v2.0.6 to v2.3.0 (#18132)

2022-01-01 16:26:27 +08:00

json

Move repository model into models/repo (#17933)

2021-12-10 09:27:50 +08:00

lfs

Fix source typos (#18227)

2022-01-10 23:46:26 +08:00

log

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

markup

Prevent NPE on partial match of compare URL and allow short SHA1 compare URLs (#18472) (#18473)

2022-01-31 01:49:17 +02:00

metrics

Refactor auth package (#17962)

2022-01-02 21:12:35 +08:00

migration

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

nosql

Remove unnecessary variable assignments (#17695)

2021-11-18 09:33:06 +08:00

notification

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

options

Remove golang vendored directory (#18277)

2022-01-14 18:16:05 -05:00

password

…

pprof

…

private

Move keys to models/asymkey (#17917)

2021-12-10 16:14:24 +08:00

process

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

proxy

…

public

Fix mime-type detection for HTTP server (#18371)

2022-01-23 21:17:20 +08:00

queue

Restart zero worker if there is still work to do (#18658) (#18672)

2022-02-08 23:28:21 +02:00

recaptcha

…

references

Add API to get issue/pull comments and events (timeline) (#17403)

2022-01-01 22:12:25 +08:00

repository

Add GetUserTeams (#18499) (#18531)

2022-02-02 08:40:04 +00:00

secret

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

session

Refactor auth package (#17962)

2022-01-02 21:12:35 +08:00

setting

Prevent security failure due to bad APP_ID (#18678) (#18682)

2022-02-10 16:17:44 +01:00

ssh

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

storage

…

structs

Add MirrorUpdated field to Repository API type (#18267)

2022-01-18 13:18:30 +00:00

svg

…

sync

…

templates

Remove golang vendored directory (#18277)

2022-01-14 18:16:05 -05:00

test

Unify and simplify TrN for i18n (#18141)

2022-01-02 04:33:57 +01:00

timeutil

Don't store assets modified time into generated files (#18193)

2022-01-06 21:33:17 -05:00

translation

Sort locales according to their names (#18211)

2022-01-08 12:18:39 +00:00

typesniffer

…

updatechecker

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

upload

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00

uri

Prevent NPE if gitea uploader fails to open url (#18080)

2021-12-23 16:27:33 +00:00

user

…

util

Increase Salt randomness (#18179)

2022-01-04 15:13:52 +00:00

validation

…

web

Simplify parameter types (#18006)

2021-12-20 04:41:31 +00:00