a31a6e3996
$header_signature could be a typed float (start with 0e and then only numbers) and a float does equal a string when comparing with typed juggle. eg: 0e123 != "abc" does return false, but 0e123 !== "abc" returns true. you previously could circumvent the signature check when providing a header signature in the float format (0e...) Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> |
||
---|---|---|
.. | ||
advanced | ||
developers | ||
features | ||
help | ||
installation | ||
upgrade | ||
usage | ||
advanced.en-us.md | ||
advanced.fr-fr.md | ||
advanced.zh-cn.md | ||
developers.en-us.md | ||
features.en-us.md | ||
features.zh-cn.md | ||
features.zh-tw.md | ||
help.en-us.md | ||
help.fr-fr.md | ||
help.zh-cn.md | ||
help.zh-tw.md | ||
installation.en-us.md | ||
installation.fr-fr.md | ||
installation.zh-cn.md | ||
installation.zh-tw.md | ||
upgrade.en-us.md | ||
upgrade.fr-fr.md | ||
upgrade.zh-cn.md | ||
upgrade.zh-tw.md | ||
usage.en-us.md | ||
usage.zh-cn.md |