Skip to content
Permalink
Browse files

mirror: use Git command to update origin remote address (#5767) (#5865)

Fixes a RCE reported by @ManassehZhou and @zeripath.
  • Loading branch information...
unknwon committed Nov 17, 2019
1 parent 5bec61b commit bbc12378d4320eb886cc6835fe0b1be038e8ac98
Showing with 19 additions and 108 deletions.
  1. +1 −1 go.mod
  2. +4 −100 go.sum
  3. +1 −1 gogs.go
  4. +12 −5 internal/db/mirror.go
  5. +1 −1 templates/.VERSION
2 go.mod
@@ -18,7 +18,7 @@ require (
github.com/go-xorm/builder v0.3.4
github.com/gogs/chardet v0.0.0-20150115103509-2404f7772561
github.com/gogs/cron v0.0.0-20171120032916-9f6c956d3e14
github.com/gogs/git-module v0.8.1
github.com/gogs/git-module v0.8.3
github.com/gogs/go-gogs-client v0.0.0-20190710002546-4c3c18947c15
github.com/gogs/go-libravatar v0.0.0-20191106065024-33a75213d0a0
github.com/gogs/minwinsvc v0.0.0-20170301035411-95be6356811a

0 comments on commit bbc1237

Please sign in to comment.
You can’t perform that action at this time.