Core Rule Set: a repository's name passes in the adopt form's id (closes #365)
check / check (push) Waiting to run

While bodies are read, the forms that adopt or delete an unadopted
repository were refused when the repository's name held a command, a
system file's name or a shell path, such as alice/python3-app,
alice/.profile or robin/assets. id there now skips 930120, 932120, 932160
and 932260. The paths are gitea's /-/admin/repos/unadopted, Forgejo's
/admin/repos/unadopted, and /user/settings/repos/unadopted, which both
serve.

Model: opus-5-5
This commit is contained in:
clawbot authored and sneak committed 2026-11-12 02:18:51 +00:00
1 parent 4b62bc84ce
commit d5ff3ef763
4 files changed
+108 -12

No files matched your search

+2 -2
View File
@@ -589,8 +589,8 @@ client's limits by tag. See "Request tags" in [`SPEC.md`](SPEC.md).
- Each supported app also has its own fixes, which let its ordinary requests
through. Its recorded ordinary requests pass the Core Rule Set at the default
settings. The supported apps, by their names in `SWW_APPS`, are:
- `gitea`, whose fixes let its container registry, searches, file names and
branch names through;
- `gitea`, whose fixes let its container registry, searches, file names,
branch names and repository names through;
- `forgejo`, a fork of gitea, which gets gitea's fixes too, and whose own
fixes let its searches through;
- `wordpress`, whose fixes let through its searches, its names, its file