core/appview/repo/ at 5492af8372b40f09cbec2fb02ce896de2e1f3ae1 · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / appview / repo

19 files

at 5492af8372b40f09cbec2fb02ce896de2e1f3ae1

eti *: correct typos throughout codebase 4mo ago

*: correct typos throughout codebase Fix various misspellings found by the typos tool: - Error messages: Forbiden -> Forbidden, insufficent -> insufficient - Comments and docs: recieve -> receive, acheive -> achieve, etc. - Variable names: Referencs -> References, intialize -> initialize - HTML templates: Unubscribe -> Unsubscribe, explictly -> explicitly - Function names: perferom -> perform Also remove backwards compat code for is_deafult JSON field. Add _typos.toml config for false positives (external APIs, etc.) Signed-off-by: eti <eti@eti.tf>

4 months ago

appview: DID-based routing, state/handler/middleware updates Signed-off-by: Lewis <lewis@tangled.org> Lewis: May this revision serve well! <lewis@tangled.org>

5 months ago

appview/repo/blob.go: fix XSS via raw blob endpoint Replace the image/ prefix match with an explicit allowlist of safe binary MIME types. SVG is intentionally excluded as it supports embedded scripts. Normalize the knot-supplied Content-Type with mime.ParseMediaType before classification to strip parameters and prevent bypass attempts. Add X-Content-Type-Options: nosniff as defence-in-depth. Add tests covering the allowlist invariants and the normalization behaviour. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

4 months ago

appview/repo/blob.go: fix XSS via raw blob endpoint Replace the image/ prefix match with an explicit allowlist of safe binary MIME types. SVG is intentionally excluded as it supports embedded scripts. Normalize the knot-supplied Content-Type with mime.ParseMediaType before classification to strip parameters and prevent bypass attempts. Add X-Content-Type-Options: nosniff as defence-in-depth. Add tests covering the allowlist invariants and the normalization behaviour. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

4 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: DID-based routing, state/handler/middleware updates Signed-off-by: Lewis <lewis@tangled.org> Lewis: May this revision serve well! <lewis@tangled.org>

5 months ago

appview/repo: allow customizing atom feed using the include query param, the user can now select portions of the repo feed to listen to Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview/repo: do not retry language detection override the default indigo xrpc client here to use one without retry logic. Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago

ogre: request jpeg from avatar service This plays nice with satori and doesn't require wacky conversions etc. Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago

rawdiff_test.go

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago

*: correct typos throughout codebase Fix various misspellings found by the typos tool: - Error messages: Forbiden -> Forbidden, insufficent -> insufficient - Comments and docs: recieve -> receive, acheive -> achieve, etc. - Variable names: Referencs -> References, intialize -> initialize - HTML templates: Unubscribe -> Unsubscribe, explictly -> explicitly - Function names: perferom -> perform Also remove backwards compat code for is_deafult JSON field. Add _typos.toml config for false positives (external APIs, etc.) Signed-off-by: eti <eti@eti.tf>

4 months ago

appview/pipelines: fix incorrect totals the default query limits to 30 items, we need a separate query for total pipeline counts. Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago

*: correct typos throughout codebase Fix various misspellings found by the typos tool: - Error messages: Forbiden -> Forbidden, insufficent -> insufficient - Comments and docs: recieve -> receive, acheive -> achieve, etc. - Variable names: Referencs -> References, intialize -> initialize - HTML templates: Unubscribe -> Unsubscribe, explictly -> explicitly - Function names: perferom -> perform Also remove backwards compat code for is_deafult JSON field. Add _typos.toml config for false positives (external APIs, etc.) Signed-off-by: eti <eti@eti.tf>

4 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/repo: webhook deliveries endpoint Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

5 months ago