core/appview/repo/ at cfbb567c9c0e5baf23773e4e4afc7bb1797fdca3 · tangled.org/core · Tangled

tangled.org / core

11

Monorepo for Tangled tangled.org

11

core / appview / repo /

at cfbb567c9c0e5baf23773e4e4afc7bb1797fdca3 19 files

oppiliappan appview/repo: allow customizing atom feed 2mo ago

appview: DID-based routing, state/handler/middleware updates Signed-off-by: Lewis <lewis@tangled.org> Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

appview: DID-based routing, state/handler/middleware updates Signed-off-by: Lewis <lewis@tangled.org> Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

appview/repo/blob.go: fix XSS via raw blob endpoint Replace the image/ prefix match with an explicit allowlist of safe binary MIME types. SVG is intentionally excluded as it supports embedded scripts. Normalize the knot-supplied Content-Type with mime.ParseMediaType before classification to strip parameters and prevent bypass attempts. Add X-Content-Type-Options: nosniff as defence-in-depth. Add tests covering the allowlist invariants and the normalization behaviour. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview/repo/blob.go: fix XSS via raw blob endpoint Replace the image/ prefix match with an explicit allowlist of safe binary MIME types. SVG is intentionally excluded as it supports embedded scripts. Normalize the knot-supplied Content-Type with mime.ParseMediaType before classification to strip parameters and prevent bypass attempts. Add X-Content-Type-Options: nosniff as defence-in-depth. Add tests covering the allowlist invariants and the normalization behaviour. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

4 months ago

appview: DID-based routing, state/handler/middleware updates Signed-off-by: Lewis <lewis@tangled.org> Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

appview/repo: allow customizing atom feed using the include query param, the user can now select portions of the repo feed to listen to Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview/repo: do not retry language detection override the default indigo xrpc client here to use one without retry logic. Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

ogre: request jpeg from avatar service This plays nice with satori and doesn't require wacky conversions etc. Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

3 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

rawdiff_test.go

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

appvie/notify: add DeleteRepo event to unindex repos when deleted. this changeset also includes a tweak to the NewRepo event, to fix a bug with the document IDs of new repos (it was always zero). Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview/pipelines: fix incorrect totals the default query limits to 30 items, we need a separate query for total pipeline counts. Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

appview/sites: use repoIdentifier for archive requests we could just use the knotmirror here directly instead of deploying from the knot, but we'd need the knotmirror to update before the site. for now just deploy from the knot. Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

4 months ago

appview,knotmirror: use knotmirror to read the repository Underlying types except the interface hasn't changed much. Removed `xrpcclient.HandleXrpcErr()` call as appview always expect knotmirror with compatible API. Signed-off-by: Seongmin Lee <git@boltless.me>

4 months ago

appview/repo: webhook deliveries endpoint Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

4 months ago