Nicolas 24ce5ae082 fix: enforce org visibility on organization label read endpoints ...

The GET /api/v1/orgs/{org}/labels and GET /api/v1/orgs/{org}/labels/{id}
endpoints did not check whether the caller could see the organization, so
labels of a private org were disclosed to non-members (and anonymously for
the list route). Add a reqOrgVisible() middleware mirroring the visibility
check used by org.Get and apply it to the labels group.

2026-06-13 17:30:10 +02:00

..

api

fix: enforce org visibility on organization label read endpoints

2026-06-13 17:30:10 +02:00

common

fix(actions): return 404 when job log blob is missing (#38003)

2026-06-05 20:10:25 +02:00

install

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

private

fix: git push hook post receive (#38089)

2026-06-13 04:43:25 +00:00

utils

Refactor flash message and remove SanitizeHTML template func (#37179)

2026-04-12 10:17:25 +08:00

web

fix: git push hook post receive (#38089)

2026-06-13 04:43:25 +00:00

init.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00