Google GitGoogle Git
Sign in
apache/allura/HEAD
  1. 65c48c4 [#8626] Make inbound email auto-reply verification case insensitive by Carlos Cruz · 2 days ago master
  2. a216a37 pytest.ini warning cleanup by Dave Brondsema · 4 days ago
  3. 13406bf replace faust-cchardet with turbohtml charset detection, check BOM by Dave Brondsema · 4 days ago
  4. 5c15f02 deal with argparse.FileType deprecation by Dave Brondsema · 4 days ago
  5. bc90640 make memoize_cleanup work for instance methods and class methods on different python versions by Dave Brondsema · 7 days ago
  6. 466bd2f clean up lint warnings in tests and lib/plugin by Guillermo Cruz · 24 hours ago
  7. 7702cc4 [#8625] Add event types for audit log records by Carlos Cruz · 4 weeks ago
  8. e0490e1 [#8625] Add encrypted field for audit log messages by Carlos Cruz · 4 weeks ago
  9. 3254c1e Hide button to send an email to create a new topic for unauthenticated users by Carlos Cruz · 2 days ago
  10. 09758cd git: handle renames from non-utf8 filenames in file history by Dave Brondsema · 4 days ago db/git_unicode_filenames
  11. 807b2b8 git: handle filenames git quotes (non-ASCII, ") in last-commit and rename logic by Dave Brondsema · 4 days ago
  12. 9687b8b update security content for 1.22.0 changes by Dave Brondsema · 4 days ago
  13. 1006457 CHANGES updated for ASF release 1.22.0 by Dave Brondsema · 7 days ago rel/1.22.0
  14. 0c8a917 [#8627] use |tojson for user-supplied values in inline JS by Dave Brondsema · 2 weeks ago
  15. 3b58ceb [#8627] OAuth consent pages: show where the user will be redirected by Dave Brondsema · 2 weeks ago
  16. 4edf7ca [#8627] 404 for deleted subprojects unless the user can manage them by Dave Brondsema · 2 weeks ago
  17. 09085e4 [#8627] hide soft-deleted projects' content from search, feeds, and activity by Dave Brondsema · 2 weeks ago
  18. 592f852 [#8627] forum email replies: only match posts in the same discussion tool by Dave Brondsema · 2 weeks ago
  19. bda02fd [#8627] GitHub importer: require saved OAuth state, single-use by Dave Brondsema · 2 weeks ago
  20. 06638a5 [#8627] ForgeFeedback: one review per user per project by Dave Brondsema · 2 weeks ago
  21. 9c05764 [#8627] feeds: skip entries from tools the viewer can no longer read by Dave Brondsema · 2 weeks ago
  22. 3def09b [#8627] don't let shared caches store files served to logged-in users by Dave Brondsema · 2 weeks ago
  23. 53e527a [#8627] primary email must be one of the user's confirmed addresses by Dave Brondsema · 3 weeks ago
  24. df3932e [#8627] ForgeFiles: hide delete activities from users without read by Dave Brondsema · 3 weeks ago
  25. 02cd1b2 [#8627] check viewer's access for "Related" artifacts on posts by Dave Brondsema · 3 weeks ago
  26. 8af81f1 [#8627] password reset: prefer the confirmed owner of an email address by Dave Brondsema · 3 weeks ago
  27. e2f8166 [#8627] require ip_address_header for /auth/repo_permissions by Dave Brondsema · 3 weeks ago
  28. cc8d754 [#8627] require read on the upstream repo to request a merge by Dave Brondsema · 3 weeks ago
  29. 346eef0 [#8627] no API tokens for disabled or pending users by Dave Brondsema · 3 weeks ago
  30. 1dc9573 [#8627] SVN: keep path lookups inside the repo by Dave Brondsema · 3 weeks ago
  31. b97e6fb [#8628] bumping EasyWidgets 0.4.3 -> 0.5.0 by Guillermo Cruz · 11 days ago
  32. 2bcbaa9 Revert "[#8623] keep inline script/style bodies raw under easywidgets autoescaping" by Guillermo Cruz · 14 days ago
  33. 1b3717e Revert "[#8623] bound the easywidgets resource cache and cap _slim requests" by Guillermo Cruz · 14 days ago
  34. 96e9d50 [#8629] updating dependencies by Guillermo Cruz · 10 days ago
  35. afc6afa bump pymongocrypt 1.16.0 -> 1.18.1 by Guillermo Cruz · 10 days ago
  36. 7c789d5 [#8629] bump pypeline 0.7.0 -> 0.8.1 by Guillermo Cruz · 11 days ago
  37. 38df454 bumping Werkzeug 3.1.6 -> 3.1.9 by Guillermo Cruz · 10 days ago
  38. 586a514 bumping pymongo 4.17.0 -> 4.18.2 by Guillermo Cruz · 10 days ago
  39. af4df40 fix partialFilterExpression: can't do $gt a different type. NEEDS INDEX DROP AND RECREATE by Dave Brondsema · 3 weeks ago
  40. 7ce0d94 bump python-discovery 1.4.4 -> 1.6.1 by Guillermo Cruz · 2 weeks ago
  41. b55b2ec bumping virtualenv 21.6.1 -> 21.14.2 by Guillermo Cruz · 2 weeks ago
  42. 0d81070 docker-compose: try giving solr a longer start period to get healthy (has been unhealthy in CI sometimes) by Dave Brondsema · 2 weeks ago
  43. 5b910a6 bumping urllib3 2.7.0 -> 2.8.0 by Guillermo Cruz · 2 weeks ago
  44. 28c64c7 bumping oauthlib 3.3.1 -> 4.0.0 by Guillermo Cruz · 2 weeks ago
  45. ac10c90 rename CLAUDE.md => AGENTS.md by Dave Brondsema · 3 weeks ago
  46. a9f564c [#8626] Log raw email headers and SPF/DMARC/DKIM verification results for monitor mode by Carlos Cruz · 4 weeks ago
  47. b61c5ab [#8624] edit support for OAuth1 and OAuth2 apps by Dave Brondsema · 4 weeks ago
  48. b25cdbb [#8624] validate OAuth1 callback URIs by Dave Brondsema · 4 weeks ago
  49. f6e76e9 [#8624] update SECURITY.md and post-install instructions by Dave Brondsema · 4 weeks ago
  50. 956e6a6 [#8624] deprecate ForgeChat by Dave Brondsema · 4 weeks ago
  51. 0732ea9 [#8624] ForgeFiles: scope the breadcrumb folder lookup to the current tool by Dave Brondsema · 4 weeks ago
  52. 65c7cf1 [#8624] ForgeUserStats: skip projects the viewer cannot read by Dave Brondsema · 4 weeks ago
  53. 1b1c7ce [#8624] bound the pagination offset by Dave Brondsema · 5 weeks ago
  54. 73943fa [#8624] sync content rate limiting in REST API with webpage limiting by Dave Brondsema · 5 weeks ago
  55. 419e069 [#8624] record OAuth1 nonces instead of accepting any by Dave Brondsema · 5 weeks ago
  56. 5fe4c1d [#8624] validate the solr sort parameter by Dave Brondsema · 5 weeks ago
  57. 8f425af [#8624] validate search filter field names by Dave Brondsema · 5 weeks ago
  58. 755c213 [#8624] apply the moderation status check to post permalinks by Dave Brondsema · 5 weeks ago
  59. 5742e96 [#8624] remove Feed entries when content is deleted or restricted by Dave Brondsema · 5 weeks ago
  60. 007daa9 [#8624] ForgeBlog: restrict fields accepted by the REST create endpoint by Dave Brondsema · 5 weeks ago
  61. 0832402 [#8624] mark tests that need network, and a --no-network flag to skip them by Dave Brondsema · 4 weeks ago
  62. 94329b7 bumping soupsieve 2.8.4 -> 2.9.2 by Guillermo Cruz · 4 weeks ago
  63. ebb6c7c [#8623] bound the easywidgets resource cache and cap _slim requests by Guillermo Cruz · 5 weeks ago
  64. c30ee2a [#8623] keep inline script/style bodies raw under easywidgets autoescaping by Guillermo Cruz · 5 weeks ago
  65. bd76680 security fixes: turn on autoescaping for widgets, fix tracker select XSS by Guillermo Cruz · 5 weeks ago
  66. 281c0ba [#8618] optimze the way to read the raw stream and a small change since now the content is bytes by Guillermo Cruz · 4 weeks ago
  67. 17b4087 [#8618] harden rev_parse() against git's relative-ref syntax by Dave Brondsema · 5 weeks ago
  68. 45090eb [#8618] read git blob content via a one-off subprocess, not the shared cat-file pipe by Dave Brondsema · 5 weeks ago
  69. 6903a05 bumping gitpython 3.1.59 -> 3.1.62 by Guillermo Cruz · 4 weeks ago
  70. 00120db error handling around "magic" lib by Dave Brondsema · 4 weeks ago
  71. 98bc2af [#8619] test for text_contains_hostname substring bypass by Dave Brondsema · 7 weeks ago
  72. 3aed169 [#8619] test for class/id sanitization on void elements by Dave Brondsema · 7 weeks ago
  73. bea428d [#8619] test for iframe body mXSS via math/svg reparse by Dave Brondsema · 7 weeks ago
  74. 6232307 [#8619] test for SVG blocked, MathML allowed by Dave Brondsema · 7 weeks ago
  75. 2037366 [#8619] test for iframe followed by script by Dave Brondsema · 7 weeks ago
  76. b71f771 [#8621] test for FTP redirect bypassing internal-host protection by Dave Brondsema · 7 weeks ago
  77. 981bd98 [#8617] Update User's set_tool_data to store encrypted tool data values by Carlos Cruz · 8 weeks ago
  78. 6696da5 add to SECURITY.md by Dave Brondsema · 6 weeks ago
  79. e518d9e publicize CVEs in 1.21.0 by Dave Brondsema · 6 weeks ago
  80. e0f5586 optimize _get_site_notification in case of users with many projects by Dave Brondsema · 6 weeks ago
  81. b172c8f [#6054] inbound sender authentication by Carlos Cruz · 9 weeks ago
  82. 467bdd4 CHANGES updated for ASF release 1.21.0 by Dave Brondsema · 7 weeks ago rel/1.21.0
  83. d938172 strengthen _verify_return_to and tests for webob upgrade by Dave Brondsema · 7 weeks ago
  84. 745fe1a bumping webob 1.8.10 -> 1.8.11 by Guillermo Cruz · 7 weeks ago
  85. 2ac3817 update discussion thread logic for consistency by Dave Brondsema · 7 weeks ago
  86. 6456d71 add license to SECURITY.md by Dave Brondsema · 7 weeks ago
  87. f09fad9 retry test_markdown_many_bad_links a few times to avoid false-positive failures by Dave Brondsema · 7 weeks ago
  88. a1cae1f start a SECURITY.md by Dave Brondsema · 7 weeks ago
  89. e1dd8e4 increase ulimits on docker web to avoid "Too many open files" during test runs at least by Dave Brondsema · 7 weeks ago
  90. 534a0b1 Fix: Force push tests by Daniel Castillo · 7 weeks ago
  91. f00edcd [#11714] more Permissions-Policy values drop Feature-policy by Daniel Castillo · 9 weeks ago
  92. 065fd8c turn on scm.force_push.git.enabled by default by Dave Brondsema · 7 weeks ago
  93. c1313dd [#8622] Rework search result filtering by Kenton Taylor · 7 weeks ago
  94. 2476a67 [#12049] Fix for sync repo config command by Daniel Castillo · 7 weeks ago
  95. 1a2c209 [#8621] drop ftp/file/data url handlers by Dave Brondsema · 7 weeks ago
  96. 2f76400 [#8620] fix space handling in renamed files by Dave Brondsema · 7 weeks ago
  97. 33d27d1 [#8619] invalidate markdown caches by Dave Brondsema · 7 weeks ago db/8619
  98. 92173b8 [#8619] fix text_contains_hostname substring bypass by Dave Brondsema · 7 weeks ago
  99. 241598c [#8619] sanitize class/id on void elements too by Dave Brondsema · 7 weeks ago
  100. 9e70d61 [#8619] drop allowed iframe's body by Dave Brondsema · 7 weeks ago