markdown

Nov 3, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 26, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 16, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Oct 12, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ var MarkupName = "markdown"

+ type Parser struct

+ func (Parser) Extensions() []string

+ func (Parser) Name() string

+ func (Parser) Render(rawBytes []byte, urlPrefix string, metas map[string]string, isWiki bool) []byte

Sep 23, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 6, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Aug 25, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Sep 4, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func InitMarkdown()

+ func RenderFullIssuePattern(rawBytes []byte) []byte

Aug 6, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 29, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

May 4, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ func NewSanitizer()

+ func Sanitize(s string) string

+ func SanitizeBytes(b []byte) []byte

Mar 9, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ var AnySHA1Pattern = regexp.MustCompile(...)

+ var CrossReferenceIssueNumericPattern = regexp.MustCompile(`( |^)[0-9a-zA-Z]+/[0-9a-zA-Z]+#[0-9]+\b`)

+ var ShortLinkPattern = regexp.MustCompile(`(\[\[.*\]\]\w*)`)

+ func IsSameDomain(s string) bool

+ func RenderCrossReferenceIssueIndexPattern(rawBytes []byte, urlPrefix string, metas map[string]string) []byte

+ func RenderShortLinks(rawBytes []byte, urlPrefix string, noLink bool, isWikiMarkdown bool) []byte

+ func RenderWiki(rawBytes []byte, urlPrefix string, metas map[string]string) string

+ func URLJoin(elem ...string) string

type Renderer

+ func (r *Renderer) List(out *bytes.Buffer, text func() bool, flags int)

Feb 21, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Jan 5, 2017 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Dec 23, 2016 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const IssueNameStyleAlphanumeric

+ const IssueNameStyleNumeric

Oct 17, 2016 GO-2022-0310 +18 more

  GO-2022-0310: Capture-replay in Gitea in code.gitea.io/gitea

  GO-2022-0315: Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea

  GO-2022-0353: Path Traversal in Gitea in code.gitea.io/gitea

  GO-2022-0442: Arbitrary file deletion in gitea in code.gitea.io/gitea

  GO-2022-0450: Shell command injection in gitea in code.gitea.io/gitea

  GO-2022-0609: Gitea Missing Authorization vulnerability in code.gitea.io/gitea

  GO-2022-0612: Stored Cross-site Scripting in gitea in code.gitea.io/gitea

  GO-2022-0830: Denial of Service in Gitea in code.gitea.io/gitea

  GO-2022-0832: Cross-site Scripting in Gitea in code.gitea.io/gitea

  GO-2022-0844: Gitea Remote Code Execution (RCE) in code.gitea.io/gitea

  GO-2022-0982: Improper Privilege Management in Gitea in code.gitea.io/gitea

  GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

  GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

  GO-2023-1922: Gitea XSS Vulnerability in code.gitea.io/gitea

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

  GO-2024-2752: Gitea Open Redirect in code.gitea.io/gitea

  GO-2024-2769: Gitea allowed assignment of private issues in code.gitea.io/gitea

  GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

Changes in this version

+ const ISSUE_NAME_STYLE_ALPHANUMERIC

+ const ISSUE_NAME_STYLE_NUMERIC

+ var CommitPattern = regexp.MustCompile(`(\s|^)https?.*commit/[0-9a-zA-Z]+(#+[0-9a-zA-Z-]*)?`)

+ var IssueAlphanumericPattern = regexp.MustCompile(`( |^|\()[A-Z]{1,10}-[1-9][0-9]*\b`)

+ var IssueFullPattern = regexp.MustCompile(`(\s|^)https?.*issues/[0-9]+(#+[0-9a-zA-Z-]*)?`)

+ var IssueNumericPattern = regexp.MustCompile(`( |^|\()#[0-9]+\b`)

+ var MentionPattern = regexp.MustCompile(`(\s|^|\W)@[0-9a-zA-Z-_\.]+`)

+ var Sanitizer = bluemonday.UGCPolicy()

+ var Sha1CurrentPattern = regexp.MustCompile(`\b[0-9a-f]{40}\b`)

+ func BuildSanitizer()

+ func FindAllMentions(content string) []string

+ func IsMarkdownFile(name string) bool

+ func IsReadmeFile(name string) bool

+ func PostProcess(rawHtml []byte, urlPrefix string, metas map[string]string) []byte

+ func Render(rawBytes []byte, urlPrefix string, metas map[string]string) []byte

+ func RenderIssueIndexPattern(rawBytes []byte, urlPrefix string, metas map[string]string) []byte

+ func RenderRaw(body []byte, urlPrefix string) []byte

+ func RenderSha1CurrentPattern(rawBytes []byte, urlPrefix string) []byte

+ func RenderSpecialLink(rawBytes []byte, urlPrefix string, metas map[string]string) []byte

+ func RenderString(raw, urlPrefix string, metas map[string]string) string

+ type Renderer struct

+ func (options *Renderer) ListItem(out *bytes.Buffer, text []byte, flags int)

+ func (r *Renderer) AutoLink(out *bytes.Buffer, link []byte, kind int)

+ func (r *Renderer) Image(out *bytes.Buffer, link []byte, title []byte, alt []byte)

+ func (r *Renderer) Link(out *bytes.Buffer, link []byte, title []byte, content []byte)