server/beego
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,823 Commits 3 Branches 2 Tags
Commit Graph

4823 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
zh199225
ee7e5ab6a8
修正：XSRFToken函数在特定情况下会产生多个不同Path的_xsrf同名cookie 
例如：访问”/login“页面，有个表单，此时会产生一个_xsrf cookie，Path为”/“，此时手动删除_xsrf cookie，Post提交到“/test/post”，会报错expected XSRF not found；后退到”/login“页面，会产生一个Path为”/login“的_xsrf cookie，然后访问"/"根页面，再回到"/login"页面，这时会产生两个_xsrf cookie，Path分别为"/"和”/login"，再向"/test/post"页面提交，后端就可能读到错误的_xsrf cookie造成XSRF验证失败。
在XSRFToken函数中，将SetSecureCookie函数中的Path参数固定为"/"，可以解决这个问题
 2021-08-19 13:08:29 +08:00
Ming Deng
b58e2b5311
Merge pull request #4732 from flycash/develop 
Update issue template
 2021-08-18 22:47:01 +08:00
Ming Deng
a64c7e678a Update issue template 2021-08-18 22:46:00 +08:00
Ming Deng
9f24a816b3
Merge pull request #4731 from flycash/develop 
Add actions to close non-English issues and non-feedback issues
 2021-08-18 22:32:11 +08:00
Ming Deng
ffb329f753 Add two more actions 2021-08-18 22:22:19 +08:00
Ming Deng
591280b9fd
Merge pull request #4729 from flycash/fixCSS 
Fix 4727: CSS when the request URI is invalid
 2021-08-17 00:39:15 +08:00
Ming Deng
e37e84b3d7 Fix 4727: CSS when the request URI is invalid 2021-08-17 00:36:42 +08:00
Ming Deng
419e395d78
Merge pull request #4718 from flycash/refactor-ctx 
Refator: Remove methods to web.context.Context
 2021-08-12 21:45:57 +08:00
Ming Deng
e7d91a2bed Refator: 
1. Move BindXXX core logic to context.Context for two reasons:
   1.1 Controller should be stateless -- Due to historical reason, it's hard for us to do this but we should try it
   1.2 If users didn't use Controller to write their functions, they should be allowed to use those methods
2. Move XXXResp to context.Context
 2021-08-10 23:27:06 +08:00
Ming Deng
17e857a762
Merge pull request #4716 from jianzhiyao/master 
hotfix:reflect.ValueOf(nil) in getFlatParams
 2021-08-06 00:27:58 +08:00
Ming Deng
0ace49bd46
Merge pull request #4715 from jianzhiyao/develop 
fix bug:reflect.ValueOf(nil) in getFlatParams
 2021-08-06 00:26:54 +08:00
Anker Jam
72f24210e8 changelog 2021-08-06 00:25:27 +08:00
Anker Jam
167749d464 hotfix:reflect.ValueOf(nil) in getFlatParams 2021-08-06 00:23:06 +08:00
jianzhiyao
8e8c02ba7b fix 2021-08-05 11:13:14 +08:00
jianzhiyao
48538d5a02 add table 2021-08-05 11:08:30 +08:00
jianzhiyao
d9f8c03085 fix format 2021-08-05 11:03:05 +08:00
jianzhiyao
61d801c21e fix format 2021-08-05 11:02:13 +08:00
jianzhiyao
d8c4b0fc85 add test example 2021-08-05 10:58:17 +08:00
jianzhiyao
54cff71def changelog 2021-08-05 10:47:05 +08:00
jianzhiyao
0f40824f57 fix bug:reflect.ValueOf(nil) in getFlatParams 2021-08-05 10:42:54 +08:00
Ming Deng
bb598b28cd
Merge pull request #4714 from flycash/comments-refactor 
Add comments for BConfig, Rename RouterXXX functions and Define HandleFunc
 2021-08-04 23:15:36 +08:00
Ming Deng
9ce8aa734a Add change log 2021-08-04 22:59:04 +08:00
Ming Deng
96c63508df
Merge pull request #4680 from zav8/patch-1 
Fix orm.SetMaxOpenConns
 2021-08-04 21:51:52 +08:00
Ming Deng
cd095e400c
Merge pull request #4693 from beego/dependabot/github_actions/actions/stale-4 
Bump actions/stale from 3.0.19 to 4
 2021-08-04 21:49:41 +08:00
Ming Deng
32d7633a04 Rename RouterXXX to CtrlXXX 2021-08-04 21:47:47 +08:00
Ming Deng
c6b001d16e Add comments for BConfig 2021-08-02 00:01:48 +08:00
Ming Deng
a91aa0e966
Merge pull request #4679 from xjl662750/develop 
add SameSite for Cookie
 2021-07-24 21:18:43 +08:00
jianzhiyao
cb5fd74a56
Merge pull request #4701 from sunxingboo/develop 
Add a custom option for whether to escape HTML special characters when processing http request parameters.
 2021-07-22 17:23:09 +08:00
sunxingbo
959adb5f0b add a CHANGELOG entry for pull request 4701 2021-07-22 17:01:57 +08:00
xjl
86b0a3ba3f add unit test cases 2021-07-22 16:18:20 +08:00
sunxingbo
14aeb4880f format the JSONMarshal unit test 2021-07-22 14:15:31 +08:00
Sun XingBo
d6f939ac09
Modify the call of JSONMarshal in the unit test 2021-07-22 13:14:01 +08:00
Sun XingBo
efd710a652
rename Marshal to JSONMarshal 2021-07-22 13:07:17 +08:00
jianzhiyao
8fc3d7c700
Merge pull request #4697 from suchen9209/develop 
fix comment
 2021-07-21 10:44:03 +08:00
sunxingbo
4a85237faf fix json marshal in http request 2021-07-20 22:38:37 +08:00
such
005b8b5813 fix comment 
change MainContorlller to MainController
 2021-07-19 16:30:34 +08:00
dependabot[bot]
d1f393d53d
Bump actions/stale from 3.0.19 to 4 
Bumps [actions/stale](https://github.com/actions/stale) from 3.0.19 to 4.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v3.0.19...v4)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-07-15 13:11:39 +00:00
Ming Deng
12af439a9c
Merge pull request #4686 from lowitea/patch-1 
Always set the response status in the CustomAbort function
 2021-07-05 16:48:15 +08:00
lowit
e359806f33
patch-1: adds a changelog entity 2021-07-04 22:38:23 +03:00
lowitea
1378006d51
Fixes CustomAbort 
Always set the response status in the CustomAbort function
 2021-07-01 16:28:36 +03:00
zav8
aff59f65fb
Fix orm.SetMaxOpenConns 
It should call `SetMaxOpenConns` instead of `SetMaxIdleConns`.
 2021-06-29 11:03:34 +08:00
xjl662750
4fa797feaa
Update output.go 
add SameSite for Cookie
 2021-06-29 09:31:50 +08:00
Ming Deng
61f5ce8c6c
Merge pull request #4677 from Codexiaoyi/develop 
fix sonar problems about regular expression
 2021-06-28 00:10:17 +08:00
LinXiaoYi
23cbe53b84 add changelog record 2021-06-26 00:37:38 +08:00
LinXiaoYi
1252b520ae fix sonar problems about regular expression 2021-06-26 00:35:34 +08:00
Ming Deng
fea7c914cc
Merge pull request #4607 from jimashi/develop 
add template functions eq,lt to support uint and int compare.
 2021-06-26 00:15:46 +08:00
letu
92b520d810 provided template function eq,lt unit test. 2021-06-25 00:51:55 +08:00
Ming Deng
2207201e38
Merge pull request #4668 from Loyalsoldier/fix-code 
Chore: fix code
 2021-06-23 23:40:53 +08:00
loyalsoldier
6e9971ab36
Chore: update changelog 2021-06-18 00:51:00 +08:00
loyalsoldier
007952f7fe
Fix: refine tests 2021-06-18 00:51:00 +08:00