Do not allow credentials to be present in the URLs that are provided for migrations and push mirrors. They have to be given via the dedicated input fields. Give a error when this happens. There's nothing wrong with trying have the backend "correct" this, but would be a larger patch than necessary in the context of a security fix. This can be done in public. |
||
|---|---|---|
| .. | ||
| action.go | ||
| avatar.go | ||
| blob.go | ||
| branch.go | ||
| collaborators.go | ||
| commits.go | ||
| compare.go | ||
| download.go | ||
| file.go | ||
| flags.go | ||
| fork.go | ||
| git_hook.go | ||
| git_ref.go | ||
| hook.go | ||
| hook_test.go | ||
| issue.go | ||
| issue_attachment.go | ||
| issue_comment.go | ||
| issue_comment_attachment.go | ||
| issue_dependency.go | ||
| issue_label.go | ||
| issue_pin.go | ||
| issue_reaction.go | ||
| issue_stopwatch.go | ||
| issue_subscription.go | ||
| issue_tracked_time.go | ||
| key.go | ||
| label.go | ||
| language.go | ||
| main_test.go | ||
| migrate.go | ||
| milestone.go | ||
| mirror.go | ||
| notes.go | ||
| patch.go | ||
| pull.go | ||
| pull_review.go | ||
| release.go | ||
| release_attachment.go | ||
| release_tags.go | ||
| repo.go | ||
| repo_test.go | ||
| star.go | ||
| status.go | ||
| subscriber.go | ||
| sync_fork.go | ||
| tag.go | ||
| teams.go | ||
| topic.go | ||
| transfer.go | ||
| tree.go | ||
| wiki.go | ||