forgejo/services/attachment
Gusted ce0a376723 fix: check that attachments belong to correct resource
It was possible to hijack attachments during update and create functions
to another owner as permissions to check they weren't already attached
to another resource and wasn't checked if it belonged to the repository
that was being operated on.
2026-03-06 11:21:07 -07:00
..
attachment.go fix: check that attachments belong to correct resource 2026-03-06 11:21:07 -07:00
attachment_test.go chore: move all test blank imports in a single package (#10662) 2026-01-02 05:32:32 +01:00