finn/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #50 from 0xbaadf00d/feature/2583-disablehttpcloning

Browse source 
Disable HTTP cloning
This commit is contained in:
Rachid Zarouali 2016-11-07 11:23:30 +01:00 • committed by GitHub
commit be5607e510
7 changed files with 40 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

5
routers/repo/http.go
View file

@ -479,6 +479,11 @@ func HTTPBackend(ctx *context.Context, cfg *serviceConfig) http.HandlerFunc {
for _, route := range routes {
r.URL.Path = strings.ToLower(r.URL.Path) // blue: In case some repo name has upper case name
if m := route.reg.FindStringSubmatch(r.URL.Path); m != nil {
if setting.Repository.DisableHTTPGit {
w.WriteHeader(http.StatusForbidden)
w.Write([]byte("Interacting with repositories by HTTP protocol is not allowed"))
return
}
if route.method != r.Method {
if r.Proto == "HTTP/1.1" {
w.WriteHeader(http.StatusMethodNotAllowed)