kallithea Files · package.json

Files @ caa482f8fb5f

Branch filter:

Location: kallithea/package.json - annotation

caa482f8fb5f 336 B application/json Show Source Show as Raw Download as Raw

Mads Kiilerich

repos: only allow api repo creation in existing groups

Fix problem with '../something' paths being allowed; '..' will always exist and
can't be created.

This also introduce a small API change: Repository groups must now exist before
repositories can be created. This makes the API more explicit and simpler.

This issue was found and reported by
Kacper Szurek
https://security.szurek.pl/

1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
1969f7dfb6b0
6c3bb9a845d7
1969f7dfb6b0
1969f7dfb6b0

{
  "name": "kallithea",
  "private": true,
  "dependencies": {
    "bootstrap": "3.3.7"
  },
  "devDependencies": {
    "less": "~2.7",
    "less-plugin-clean-css": "~1.5"
  },
  "scripts": {
    "less": "lessc --relative-urls --source-map --source-map-less-inline kallithea/public/less/main.less kallithea/public/css/style.css"
  }
}