forgejo-backport-action 4819d4a29a [v12.0/forgejo] fix: follow symlinks for local assets (#8610) ... **Backport:** https://codeberg.org/forgejo/forgejo/pulls/8596 - This reverts behavior that was partially unintentionally introduced in forgejo/forgejo#8143, symbolic links were no longer followed (if they escaped the asset folder) for local assets. - Having symbolic links for user-added files is, to my understanding, a ,common usecase for NixOS and would thus have symbolic links in the asset folders. Avoiding symbolic links is not easy. - The previous code used `http.Dir`, we cannot use that as it's not of the same type. The equivalent is `os.DirFS`. - Unit test to prevent this regression from happening again. Reported-by: bloxx12 (Matrix). Co-authored-by: Gusted <postmaster@gusted.xyz> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/8610 Reviewed-by: Gusted <gusted@noreply.codeberg.org> Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org> Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>		2025-07-22 18:41:03 +02:00
..
actions	[gitea] week 2025-22 cherry pick (gitea/main -> forgejo) (#8198)	2025-06-17 18:28:07 +02:00
activitypub	fix various typos (#7690)	2025-04-28 06:46:29 +00:00
analyze	Rename code_langauge.go to code_language.go (#26377)	2023-08-07 15:00:53 -04:00
assetfs	[v12.0/forgejo] fix: follow symlinks for local assets (#8610)	2025-07-22 18:41:03 +02:00
auth	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
avatar	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
base	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
cache	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
card	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
charset	feat: update ambigious characters (#7988)	2025-05-29 10:00:12 +02:00
container	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
csv	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
emoji	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
eventsource	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
forgefed	refactor & enhance AP elements used (#7728)	2025-06-02 22:29:10 +02:00
generate	chore(sec): unify usage of crypto/rand.Read (#7453)	2025-04-04 03:31:37 +00:00
git	git/blob: add truncated tests	2025-06-20 20:43:10 +02:00
gitrepo	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
graceful	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
hcaptcha	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
highlight	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
hostmatcher	Support allowed hosts for migrations to work with proxy (#32025)	2024-09-14 17:52:54 +02:00
html	Refactor backend SVG package and add tests (#26335)	2023-08-05 04:34:59 +00:00
httpcache	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
httplib	fix: omit Content-Length on 307 redirects when serving direct manifest for containers (#8037)	2025-06-09 08:43:41 +02:00
indexer	[v12.0/forgejo] fix(code-search): HighlightSearchResultCode should count the number of bytes and not the number of runes (#8498)	2025-07-12 19:00:07 +02:00
issue/template	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
json	Replace interface{} with any (#25686)	2023-07-04 18:36:08 +00:00
keying	chore(sec): unify usage of crypto/rand.Read (#7453)	2025-04-04 03:31:37 +00:00
label	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
lfs	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
log	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
markup	[v12.0/forgejo] fix(ui): add missing lazy load attribute to images (#8282)	2025-06-25 20:42:35 +02:00
mcaptcha	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
metrics	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
migration	fix(migrations): transfer PR flow information (#7421)	2025-04-03 06:47:37 +00:00
nosql	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
optional	Move ParseBool to optional (#33979)	2025-04-01 02:28:02 +02:00
options	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
packages	[v12.0/forgejo] several fixes of ALT Package registry (#8480)	2025-07-10 21:57:46 +02:00
paginator	Use more specific test methods (#24265)	2023-04-22 17:56:27 -04:00
pprof	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
private	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
process	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
proxy	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
proxyprotocol	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
public	add model viewer for .glb (GLTF) model in file view (#8111)	2025-06-21 14:42:35 +02:00
queue	chore: QoL improvements to tests (#7917)	2025-05-21 15:45:56 +02:00
recaptcha	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
references	fix: pull request cross references (#7979)	2025-05-28 14:50:05 +02:00
regexplru	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
repository	feat: configurable default units for mirrors (#7902)	2025-06-03 08:12:29 +02:00
secret	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v1.64.6 (forgejo) (#7118)	2025-03-04 21:38:35 +00:00
session	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
setting	[v12.0/forgejo] fix: use correct ACME default (#8552)	2025-07-17 21:21:43 +02:00
sitemap	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
ssh	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
storage	chore(ci): skip tests if TEST_{MINIO_ENDPOINT,ELASTICSEARCH_URL} is not set (#8166)	2025-06-12 21:13:52 +02:00
structs	[v12.0/forgejo] fix(ui): Add pasted images to dropzone (#8362)	2025-06-30 16:19:58 +02:00
svg	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
sync	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
system	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
templates	[v12.0/forgejo] fix(ui): add missing lazy load attribute to images (#8282)	2025-06-25 20:42:35 +02:00
test	chore: QoL improvements to tests (#7917)	2025-05-21 15:45:56 +02:00
testlogger	feat: use XORM EngineGroup instead of single Engine connection (#7212)	2025-03-30 11:34:02 +00:00
timeutil	Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)	2025-03-28 22:22:21 +00:00
translation	Replace the 'relative-time' element scripting with custom, translatable rewrite (#6154)	2025-05-03 14:11:01 +00:00
turnstile	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
typesniffer	add model viewer for .glb (GLTF) model in file view (#8111)	2025-06-21 14:42:35 +02:00
updatechecker	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
uri	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
user	Drop SSPI auth support and more Windows files (#7148)	2025-03-08 00:43:41 +00:00
util	[v12.0/forgejo] fix: ASCII equal fold for authorization header (#8459)	2025-07-10 01:30:07 +02:00
validation	fix: allow instance API URLs in release assets (#7644)	2025-06-09 10:01:59 +02:00
web	feat: make Forgejo Actions server logs less noisy (#7986)	2025-05-29 10:06:30 +02:00
webhook	Actions Failure, Succes, Recover Webhooks (#7508)	2025-06-03 14:29:19 +02:00
zstd	Cache generated binary across jobs	2024-08-26 23:43:09 +02:00