forgejo/routers/web/repo
Gusted 5488ec7d96
security: add permission check to 'delete branch after merge'
- Add a permission check that the doer has write permissions to the head
repository if the the 'delete branch after merge' is enabled when
merging a pull request.
- Unify the checks in the web and API router to `DeleteBranchAfterMerge`.
- Added integration tests.

(cherry picked from commit 266e0b2ce9)

Conflicts:
	tests/integration/pull_merge_test.go
  trivial context conflict
2024-10-28 06:32:10 +01:00
..
actions Fix nil dereference on error (#30740) (#30746) 2024-05-01 08:14:16 +02:00
badges badges: Relax the default workflow badge conditions 2024-05-20 10:47:25 +00:00
flags Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
setting Show lock owner instead of repo owner on LFS setting page (#31788) (#31817) 2024-08-18 07:01:03 +02:00
activity.go Show repo activities even if only code unit active or git repo is empty but issue is active (#3455) 2024-04-28 13:50:45 +00:00
attachment.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
blame.go Migrate margin and padding helpers to tailwind (#30043) 2024-03-30 07:17:29 +01:00
branch.go Use repo object format name instead of detecting from git repository (#29702) 2024-03-20 08:46:28 +01:00
cherry_pick.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
code_frequency.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
commit.go [BUG] Fix panic on too high page number 2024-07-22 14:31:05 +02:00
compare.go [v7.0/forgejo] Fix "view file" button in diff compare view (#3077) 2024-04-06 13:24:55 +00:00
contributors.go Fix Activity Page Contributors dropdown (#31264) 2024-06-18 19:42:31 +00:00
download.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
editor.go Add missed return after ctx.ServerError (#31130) (#31133) 2024-05-31 14:35:19 +02:00
editor_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
find.go Escape paths for find file correctly (#30026) 2024-03-26 19:04:27 +01:00
githttp.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
githttp_test.go Fix http protocol auth (#27875) 2023-11-02 22:14:33 +08:00
helper.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
helper_test.go Make web context initialize correctly for different cases (#26726) 2023-08-25 19:07:42 +08:00
issue.go [BUG] Return blocking errors as JSON errors 2024-08-10 05:53:00 +00:00
issue_content_history.go Migrate margin and padding helpers to tailwind (#30043) 2024-03-30 07:17:29 +01:00
issue_dependency.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_label.go [GITEA] Apply changes to archived labels 2024-04-03 20:14:39 +00:00
issue_label_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
issue_lock.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_pin.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_stopwatch.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
issue_timetrack.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_watch.go Fix Issue watching / unwatching on the web ui 2024-05-01 13:32:39 +02:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
middlewares.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
migrate.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
milestone.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
packages.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
patch.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
projects.go Fix various problems around projects board view (#30696) 2024-05-14 15:51:15 +02:00
projects_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
pull.go security: add permission check to 'delete branch after merge' 2024-10-28 06:32:10 +01:00
pull_review.go Prevent re-review and dismiss review actions on closed and merged PRs (#30065) 2024-03-30 07:17:32 +01:00
pull_review_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
recent_commits.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
release.go Fix release published actions not triggering for releases created from existing tags 2024-04-16 18:28:53 +00:00
release_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
render.go Refactor render (#30136) 2024-03-30 07:17:31 +01:00
repo.go Add an immutable tarball link to archive download headers for Nix 2024-05-29 18:50:14 +00:00
search.go [v7.0/forgejo] [BUG] Fix code search in explore reporting as git grep even with indexer enabled (#3204) 2024-04-14 14:21:31 +00:00
topic.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
treelist.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
view.go s/Gitea/Forgejo in various log messages and comments 2024-04-22 14:41:17 +00:00
view_test.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
wiki.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
wiki_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00