forgejo/docs/content/doc
Cacciuc a31a6e3996
proper signature validation (#13523)
$header_signature could be a typed float (start with 0e and then only numbers) and a float does equal a string when comparing with typed juggle.
eg: 0e123 != "abc" does return false, but 0e123 !== "abc" returns true.

you previously could circumvent the signature check when providing a header signature in the float format (0e...)

Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-11-13 13:28:15 -05:00
..
advanced Remove duplicated repository.upload on cheat-sheet docs (#13290) 2020-10-24 13:49:52 -04:00
developers Refactor docs (#13275) 2020-10-23 11:59:45 -04:00
features proper signature validation (#13523) 2020-11-13 13:28:15 -05:00
help Refactor docs (#13275) 2020-10-23 11:59:45 -04:00
installation Add note about installation on kubernetes to docs (#13469) 2020-11-08 15:50:40 -05:00
upgrade
usage Fix --port setting (#13288) 2020-10-30 15:26:03 -04:00
advanced.en-us.md
advanced.fr-fr.md
advanced.zh-cn.md
developers.en-us.md Refactor docs (#13275) 2020-10-23 11:59:45 -04:00
features.en-us.md
features.zh-cn.md
features.zh-tw.md
help.en-us.md
help.fr-fr.md
help.zh-cn.md
help.zh-tw.md
installation.en-us.md
installation.fr-fr.md
installation.zh-cn.md
installation.zh-tw.md
upgrade.en-us.md
upgrade.fr-fr.md
upgrade.zh-cn.md
upgrade.zh-tw.md
usage.en-us.md
usage.zh-cn.md