Fail when API & web endpoints use unrelated ids#28211

Closed

earl-warren wants to merge 16 commits intogo-gitea:release/v1.20from

earl-warren:wip-gitea-v1.20-security

Commits on Nov 24, 2023

enforce reqRepoReader(unit.TypeIssues) GET /repos/{owner}/{repo}/issues/pinned
Loïc Dachary
committed
enforce reqRepoReader(unit.TypeIssues) POST /repos/{owner}/{repo}/issues
Loïc Dachary
committed
fix API usage of a PR index in place of issue index and vice versa
Loïc Dachary
committed
fix PATCH /api/v1/repos/{owner}/{repo}/issues/comments/{id}
Loïc Dachary
committed
fix {DELETE,POST} /repos/{owner}/{repo}/issues/comments/{id}/reactions
Loïc Dachary
committed
fix GET /repos/{owner}/{repo}/issues/comments/{id}/reactions
Loïc Dachary
committed
fix DELETE /api/v1/repos/{owner}/{repo}/issues/comments/{id}
Loïc Dachary
committed
fix POST /{owner}/{repo}/comments/{id}/delete
Loïc Dachary
committed
fix POST /{owner}/{repo}/comments/{id}
Loïc Dachary
committed
fix POST /{owner}/{repo}/comments/{id}/reactions/{action}
Loïc Dachary
committed
fix GET /{owner}/{repo}/comments/{id}/attachments
Loïc Dachary
committed
fix POST /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/soft-delete
Loïc Dachary
committed
fix GET /{username}/{reponame}/{type:issues|pulls}/{index}/content-history/detail
Loïc Dachary
committed
fix POST /{username}/{reponame}/{tags,release}/delete
Loïc Dachary
committed
fix GET /api/v1/repos/{owner}/{repo}/keys/{id}
Loïc Dachary
committed
fix POST /{username}/{reponame}/{type:issues|pulls}/move_pin
Loïc Dachary
committed