Sunil Mohan Adapa 3001099cda

gitweb: Fix issue with elevated access to private repositories ...

When using git-http-backend, both URLs ending with and without .git are allowed.
However, access restriction has only be applied for URLs ending with .git. This
means that private git repositories are clone-able by anonymous users by
removing the .git suffix in the URLs.

Fix the issue by extending the access restriction to cover URLs not ending with
.git.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>

2019-10-19 19:14:04 -07:00

..

locale

Translated using Weblate (Dutch)

2019-10-16 00:52:52 +02:00

migrations

locale: Update profile model

2018-02-21 21:08:11 +01:00

modules

gitweb: Fix issue with elevated access to private repositories

2019-10-19 19:14:04 -07:00

templates

templates: Remove unused app-subsubmenu.html

2019-10-05 13:26:21 -04:00

templatetags

Rename Plinth to FreedomBox in license headers

2018-02-16 20:10:09 -05:00

tests

pagekite: Remove first wizard step for danube edition

2019-10-02 17:21:39 -04:00

__init__.py

Release v19.18 to unstable

2019-10-07 19:15:54 -04:00

__main__.py

Fix typos in module init docs

2019-07-24 14:55:22 -07:00

action_utils.py

diagnose: Move negating diagnose result inside try bock

2019-09-23 18:48:49 -07:00

actions.py

actions: Improve log message about action execution

2019-09-08 09:49:24 -04:00

app.py

Fix typos in module init docs

2019-07-24 14:55:22 -07:00

axes_app_config.py

Add flake8 to gitlib-ci - closes #58

2019-07-25 11:07:06 -07:00

cfg.py

pagekite: Remove first wizard step for danube edition

2019-10-02 17:21:39 -04:00

clients.py

Rename Plinth to FreedomBox in license headers

2018-02-16 20:10:09 -05:00

context_processors.py

Introduce component architecture and menu component

2019-06-07 11:48:04 -07:00

daemon.py

Introduce daemon component to handle systemd units

2019-06-13 20:18:02 -04:00

dbus.py

letsencrypt: Implement DBus service for renewal notifications

2019-07-16 15:11:41 +05:30

errors.py

pagekite: Remove first wizard step for danube edition

2019-10-02 17:21:39 -04:00

forms.py

names: Make all apps use new api to retrieve domain names

2019-08-11 18:39:54 -04:00

frontpage.py

frontpage: Log a message when loading custom shortcuts

2019-08-11 07:46:09 -04:00

kvstore.py

…

log.py

logging: Implement colors for console messages

2018-12-23 17:18:25 -05:00

menu.py

config: Add option to show advanced apps

2019-06-10 11:15:58 -07:00

middleware.py

middleware: Skip 'installed' message for essential apps

2018-04-09 19:10:49 +05:30

models.py

locale: Automatically save profile when user model is saved

2018-02-21 21:08:27 +01:00

module_loader.py

module_loader: Remove log message when app is imported

2019-09-08 09:49:21 -04:00

network.py

Remove unused imports and variables

2018-06-18 19:27:40 -04:00

package.py

setup: Make additional info available for force upgrading

2019-02-28 20:48:51 -05:00

setup.py

setup: Better log message when no apps need upgrades

2019-09-08 09:49:18 -04:00

signals.py

config: Remove unused domain change signal

2019-08-11 18:40:12 -04:00

translation.py

locale: Decouple language setting from login views

2018-02-21 21:08:05 +01:00

urls.py

apps: Separate enabled and disabled apps

2019-05-07 16:57:55 -07:00

utils.py

names: Make all apps use new api to retrieve domain names

2019-08-11 18:39:54 -04:00

views.py

views: Fix failure in redirecting from language selection page

2019-09-04 21:27:17 -04:00

web_framework.py

Minor yapf and isort changes

2019-07-21 09:06:04 -04:00

web_server.py

web_server: Remove log message about serving static directory

2019-09-08 09:49:16 -04:00