aiforge

6850 Commits

197 Branches

392 MB

3514 Download

Tree: c20be7edd1

Commit Graph

Author SHA1 Message Date

Author	SHA1	Message	Date
Michael Kuhn	c20be7edd1	Explicitly disable Git credential helper (#5367 ) * Explicitly disable Git credential helper If the user running Gitea has configured a credential helper, Git credentials might leak out of Gitea. There are two problems with credential helpers when combined with Gitea: 1. Credentials entered by a user when doing a migration or setting up a mirror will end up in the credential store. In the worst case, this is the plain text file ~/.git-credentials. 2. Credentials in the credential store will be used for migrations and mirrors by all users. For example, if user A sets up a mirror, their credentials will be stored. If user B later sets up a mirror from the same host and does not enter any credentials, user A's credentials will be used. This PR prepends -c credential.helper= to all Git commands to clear the list of helpers. This requires at least Git version 2.9, as previous versions will try to load an empty helper instead. For more details, see `24321375cd` * Update git module	6 years ago
Lunny Xiao	301dcd4876	update code.gitea.io/git (#450 )	8 years ago
Sandro Santilli	cb1b3cc148	Update import paths from github.com/go-gitea to code.gitea.io (#135 ) - Update import paths from github.com/go-gitea to code.gitea.io - Fix import path for travis See https://docs.travis-ci.com/user/languages/go#Go-Import-Path	8 years ago

Michael Kuhn

c20be7edd1

Explicitly disable Git credential helper (#5367 )

* Explicitly disable Git credential helper

If the user running Gitea has configured a credential helper, Git
credentials might leak out of Gitea.

There are two problems with credential helpers when combined with Gitea:

1. Credentials entered by a user when doing a migration or setting up a
   mirror will end up in the credential store. In the worst case, this
   is the plain text file ~/.git-credentials.
2. Credentials in the credential store will be used for migrations and
   mirrors by all users. For example, if user A sets up a mirror, their
   credentials will be stored. If user B later sets up a mirror from the
   same host and does not enter any credentials, user A's credentials
   will be used.

This PR prepends -c credential.helper= to all Git commands to clear the
list of helpers. This requires at least Git version 2.9, as previous
versions will try to load an empty helper instead. For more details, see
24321375cd

* Update git module

6 years ago

Lunny Xiao 301dcd4876 update code.gitea.io/git (#450 ) 8 years ago

Sandro Santilli

cb1b3cc148

Update import paths from github.com/go-gitea to code.gitea.io (#135 )

- Update import paths from github.com/go-gitea to code.gitea.io
- Fix import path for travis

See https://docs.travis-ci.com/user/languages/go#Go-Import-Path

8 years ago

3 Commits (c20be7edd1892dafe27d829f5a44b9f398516f58)