Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

時々Giteaのトップページに飛ばされることがある #1

Open
sapphi-red opened this issue Feb 25, 2020 · 2 comments
Open

時々Giteaのトップページに飛ばされることがある #1

sapphi-red opened this issue Feb 25, 2020 · 2 comments
Labels
bug Something isn't working

Comments

@sapphi-red
Copy link

redirect_toクッキー周りとか？

要調査
@sapphi-red sapphi-red added the bug Something isn't working label Feb 25, 2020
@sapphi-red
Copy link
Author

sapphi-red commented Mar 2, 2020 •
edited
Loading

gitea/modules/auth/sso/sso.go

Lines 30 to 35 in 575d2b2

var ssoMethods = []SingleSignOn{
&OAuth2{},
&Session{},
&ReverseProxy{},
&Basic{},
}

このあたりに認証を加えるのがよさそうかな？わからん

@sapphi-red
Copy link
Author

おそらくi_like_giteaクッキーのExpiresがSessionになっているから

pirosiki197 pushed a commit that referenced this issue May 30, 2024
@silverwind
Upgrade golang.org/x/net to v0.24.0 (go-gitea#30283)
9550404 
Result of `go get -u golang.org/x/net; make tidy`.

This is related to the following vulncheck warning:
```
There are 2 vulnerabilities in modules that you require that are
neither imported nor called. You may not need to take any action.
See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck for details.

Vulnerability #1: GO-2024-2687
    HTTP/2 CONTINUATION flood in net/http
  More info: https://pkg.go.dev/vuln/GO-2024-2687
  Module: golang.org/x/net
    Found in: golang.org/x/[email protected]
    Fixed in: golang.org/x/[email protected]

Vulnerability #2: GO-2022-0470
    No access control in github.com/blevesearch/bleve and bleve/v2
  More info: https://pkg.go.dev/vuln/GO-2022-0470
  Module: github.com/blevesearch/bleve/v2
    Found in: github.com/blevesearch/bleve/[email protected]
    Fixed in: N/A
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@sapphi-red