gitea/modules/setting
zeripath 2e317d3f6e
Prevent security failure due to bad APP_ID (#18678) (#18682)
Backport #18678

WebAuthn may cause a security exception if the provided APP_ID is not allowed for the
current origin. Therefore we should reattempt authentication without the appid
extension.

Also we should allow [u2f] as-well as [U2F] sections.

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-02-10 16:17:44 +01:00
..
attachment.go
cache.go
cors.go
cron_test.go
cron.go
database_sqlite.go
database_test.go
database.go
directory.go
federation.go
git.go
i18n.go
indexer_test.go
indexer.go
lfs.go
log.go
mailer.go
markup.go
migrations.go
mime_type_map.go
mirror.go
oauth2_client.go
picture.go
project.go
proxy.go
queue.go
repository.go
service.go
session.go
setting_test.go
setting.go
storage_test.go
storage.go
task.go
webhook.go