wxiaoguang 20ae184967 Only allow webhook to send requests to allowed hosts (#17482) (#17510) ...

Backport #17482

* Only allow webhook to send requests to allowed hosts (backport #17482)

* use ALLOWED_HOST_LIST=* for default to keep the legacy behavior in 1.15.x

2021-11-06 09:23:43 +00:00

..

admin_auth_ldap_test.go

Add restricted user filter to LDAP authentication (#10600)

2020-03-05 08:30:33 +02:00

admin_auth_ldap.go

Add restricted user filter to LDAP authentication (#10600)

2020-03-05 08:30:33 +02:00

admin.go

Fix missing storage init (#15589)

2021-04-22 18:48:47 +02:00

cert.go

Add golangci (#6418)

2019-06-12 15:41:28 -04:00

cmd.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

convert.go

Add --quiet and --verbose to gitea web to control initial logging (#16260)

2021-06-26 20:56:58 -04:00

docs.go

Add docs command (#13429)

2020-11-07 08:32:57 +08:00

doctor.go

Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971) (#16977)

2021-09-07 19:39:05 +01:00

dump_repo.go

Add --quiet and --verbose to gitea web to control initial logging (#16260)

2021-06-26 20:56:58 -04:00

dump.go

Fix various documentation, user-facing, and source comment typos (#16367)

2021-07-08 13:38:13 +02:00

embedded_stub.go

Implement "embedded" command to extract static resources (#9982)

2020-02-02 10:17:44 +08:00

embedded.go

Retry rename on lock induced failures (#16435)

2021-07-15 11:46:07 -04:00

generate.go

Add asymmetric JWT signing (#16010)

2021-06-17 23:56:46 +02:00

hook.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

keys.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

mailer.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

manager.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

migrate_storage.go

Fix various documentation, user-facing, and source comment typos (#16367)

2021-07-08 13:38:13 +02:00

migrate.go

Add --quiet and --verbose to gitea web to control initial logging (#16260)

2021-06-26 20:56:58 -04:00

restore_repo.go

Second attempt at preventing zombies (#16326)

2021-07-14 10:43:13 -04:00

serv.go

Switch to maintained jwt lib (#16532) (#16533)

2021-07-24 11:13:50 -04:00

web_graceful.go

Move FCGI req.URL.Path fix-up to the FCGI listener (#15292)

2021-04-09 21:17:57 +08:00

web_letsencrypt.go

Support HTTP/2 in Let's Encrypt (#16371)

2021-07-13 18:17:46 +01:00

web.go

Only allow webhook to send requests to allowed hosts (#17482) (#17510)

2021-11-06 09:23:43 +00:00