mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2026-07-21 17:08:43 +00:00
73bd2e922a
**Backport**: https://codeberg.org/forgejo/forgejo/pulls/9067 When performing a `git clone` that requires credentials, they are temporarily stored in files and used with [Git credential](https://git-scm.com/docs/gitcredentials/2.50.0#_requesting_credentials). They were previously included in the URL that were readable by a user with shell access to the host running the Forgejo instance when, for instance, they ask for the list of process (`ps`). Co-authored-by: Gusted <postmaster@gusted.xyz> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9069 Reviewed-by: 0ko <0ko@noreply.codeberg.org> |
||
|---|---|---|
| .. | ||
| filebuffer | ||
| rotatingfilewriter | ||
| color.go | ||
| color_test.go | ||
| error.go | ||
| file_unix.go | ||
| file_unix_test.go | ||
| io.go | ||
| io_test.go | ||
| keypair.go | ||
| keypair_test.go | ||
| legacy.go | ||
| legacy_test.go | ||
| pack.go | ||
| pack_test.go | ||
| paginate.go | ||
| paginate_test.go | ||
| path.go | ||
| path_test.go | ||
| remove.go | ||
| sanitize.go | ||
| sanitize_test.go | ||
| sec_to_time.go | ||
| sec_to_time_test.go | ||
| shellquote.go | ||
| shellquote_test.go | ||
| slice.go | ||
| slice_test.go | ||
| string.go | ||
| string_test.go | ||
| timer.go | ||
| timer_test.go | ||
| truncate.go | ||
| truncate_test.go | ||
| url.go | ||
| util.go | ||
| util_test.go | ||