about summary refs log tree commit diff
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2024-02-02 15:19:25 +0100
committerGitHub <noreply@github.com>2024-02-02 15:19:25 +0100
commit39d8adc12a930db5abd121a7169ddc85b49f17a0 (patch)
tree3a7ecc96e08f0a0179147090015509029cf5df1c
parentc3e9c0b5f8242f8d2a52136f58ec663c4d5d4b26 (diff)
parentb1a29ef525a2e1ffd5555ebbf5b062001e2fc449 (diff)
Merge pull request #285577 from Ma27/patch-gitea-unauthorized-access
[23.11] gitea: prevent unauthorized access to containers from public repos if REQUIRE_SIGNIN_VIEW is set
-rw-r--r--pkgs/applications/version-management/gitea/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/applications/version-management/gitea/default.nix b/pkgs/applications/version-management/gitea/default.nix
index 8683540568960..f3c05bdbeb73b 100644
--- a/pkgs/applications/version-management/gitea/default.nix
+++ b/pkgs/applications/version-management/gitea/default.nix
@@ -2,6 +2,7 @@
 , stdenv
 , buildGoModule
 , fetchurl
+, fetchpatch
 , makeWrapper
 , git
 , bash
@@ -32,6 +33,11 @@ buildGoModule rec {
 
   patches = [
     ./static-root-path.patch
+    # https://github.com/go-gitea/gitea/pull/28877
+    (fetchpatch {
+      url = "https://patch-diff.githubusercontent.com/raw/go-gitea/gitea/pull/28877.patch";
+      hash = "sha256-cThW3EnHR695thajbnmfNziVB/iBP9OPeDgWbszYIeg=";
+    })
   ];
 
   postPatch = ''