Free as in Freedom: Codeberg.org. Create your repos!

#32 2FA bypass when using API

Closed
opened 2 months ago by ashimokawa · 3 comments

(removed in favor of directly communication with gitea maintainers)

(removed in favor of directly communication with gitea maintainers)
ashimokawa self-assigned this 2 months ago
ashimokawa added the
bug
label 2 months ago
hw commented 2 months ago
Owner

Seems there has been quite some controversy regarding the delete-issue feature last November. (this just one of many examples: https://hub.packtpub.com/github-now-allows-repository-owners-to-delete-an-issue-curse-or-a-boon/)

Assuming Gitea would get this feature too, we may need to discuss whether Codeberg.org should allow this too. Alternative might be implementing an option to mark issues as “private” (that is visible only to reporter and project/org members)?

Seems there has been quite some controversy regarding the delete-issue feature last November. (this just one of many examples: https://hub.packtpub.com/github-now-allows-repository-owners-to-delete-an-issue-curse-or-a-boon/) Assuming Gitea would get this feature too, we may need to discuss whether Codeberg.org should allow this too. Alternative might be implementing an option to mark issues as "private" (that is visible only to reporter and project/org members)?
ashimokawa commented 2 months ago
Owner

@hw It might make sense to delete issues in some cases, I think project maintainers should decide themselves. But we are offtopic :P

@hw It might make sense to delete issues in some cases, I think project maintainers should decide themselves. But we are offtopic :P
ashimokawa changed title from old title to (security issue) 2 months ago
ashimokawa changed title from (security issue) to 2FA bypass when using API 4 weeks ago
ashimokawa commented 4 weeks ago
Owner

This issue is fixed in gitea 1.8.0 which has been deployed on Codeberg.org

This issue is fixed in gitea 1.8.0 which has been deployed on Codeberg.org
Sign in to join this conversation.
No Milestone
No Assignees
2 Participants
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
Cancel
Save
There is no content yet.