zeripath c0bbbdd30b Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272) ...

* Add CSRF checking to reqToken and place CSRF in the post for deadline creation

Fixes #5226, #5249

* /api/v1/admin/users routes should have reqToken middleware

2018-11-04 10:42:15 -05:00

..

admin

Allow admin toggle forcing a password change for newly created users (#4563)

2018-09-13 12:34:36 -04:00

api/v1

Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272)

2018-11-04 10:42:15 -05:00

dev

Make time diff translatable (#2057)

2017-06-28 13:43:28 +08:00

org

Fixed bug where team with admin privelege type doesn't get any unit attached to the team (#4719)

2018-08-21 13:02:32 -04:00

private

improve protected branch to add whitelist support (#2451)

2017-09-14 16:16:22 +08:00

repo

Add comment replies (#5147)

2018-10-23 10:38:06 -04:00

routes

Disable debug routes unless PPROF is enabled in configuration (#4995)

2018-09-29 18:44:06 -04:00

user

fix to 3819 - Backport (#5219)

2018-10-29 15:56:21 -04:00

utils

Slack webhook channel name cannot be empty or just contain an hashtag (#4786)

2018-09-10 10:31:08 -04:00

home.go

feat(repo): support search repository by topic name (#4505)

2018-09-13 10:33:48 +08:00

init.go

Store OAuth2 session data in database (#3660)

2018-04-29 09:09:24 +03:00

install.go

Remove traces of embedded TiDB (#4906)

2018-09-11 10:42:40 -04:00

swagger_json.go

Swagger.v1.json template (#3572)

2018-07-28 03:19:01 +03:00