This repository has been archived on 2024-01-04. You can view files and clone it, but cannot push or open issues or pull requests.
forgejo/routers
Anthony Wang f53e46c721
If httpsig verification fails, fix Host header and try again
This fixes a very rare bug when Gitea and another AP server (confirmed to happen with Mastodon) are running on the same machine, Gitea fails to verify incoming HTTP signatures. This is because the other AP server creates the sig with the public Gitea domain as the Host. However, when Gitea receives the request, the Host header is instead localhost, so the signature verification fails. Manually changing the host header to the correct value and trying the verification again fixes the bug.
2022-06-14 16:23:08 -05:00
..
api If httpsig verification fails, fix Host header and try again 2022-06-14 16:23:08 -05:00
common Fix raw endpoint PDF file headers (#19825) 2022-05-28 18:10:14 +03:00
install feat: add DEFAULT_MERGE_STYLE to `repository.pull-request` section for repo init (#19751) 2022-06-02 23:45:54 -04:00
private Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
utils
web Make sure API responses always refer to username in original case 2022-06-14 12:01:41 -05:00
init.go Fix data-race problems in git module (quick patch) (#19934) 2022-06-11 11:56:27 +08:00