mirror of
https://github.com/hanzoai/forge.git
synced 2026-10-30 15:00:39 +00:00
zeekayandHanzo Dev
9a07b4d089
2978 files. The fork is 2026-07-15 (rebrand: gitea.dev -> github.com/hanzoai/git), so 2026 is the year, and "Copyright 2026 Hanzo AI, Inc." was already the form used by the handful of files that had ours. Shape is now: // Copyright 2026 Hanzo AI, Inc. All rights reserved. // Copyright 2015 The Gogs Authors. All rights reserved. // Copyright 2019 The Gitea Authors. All rights reserved. // SPDX-License-Identifier: MIT Ours on top, theirs retained verbatim. Retained because MIT requires it, and separately because they are true — those authors did write that code. Not renamed to "The Git Authors": Git is a different project under a different license, and putting its name here would attribute this code to people who have nothing to do with it. Adding our line is the fix; overwriting theirs would have been both a licence violation and a false statement. gofmt still reports import-order drift in some of these files. It predates this change (verified against a stash) and is left alone rather than burying a one-line-per-file legal change under 3000 files of unrelated reordering. Build clean. Co-authored-by: Hanzo Dev <[email protected]>
88 lines
3.0 KiB
Go
88 lines
3.0 KiB
Go
// Copyright 2026 Hanzo AI, Inc. All rights reserved.
|
|
// Copyright 2022 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package migrations
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
system_model "github.com/hanzoai/git/models/system"
|
|
"github.com/hanzoai/git/modules/git"
|
|
"github.com/hanzoai/git/modules/log"
|
|
base "github.com/hanzoai/git/modules/migration"
|
|
)
|
|
|
|
// WarnAndNotice will log the provided message and send a repository notice
|
|
func WarnAndNotice(fmtStr string, args ...any) {
|
|
log.Warn(fmtStr, args...)
|
|
if err := system_model.CreateRepositoryNotice(fmt.Sprintf(fmtStr, args...)); err != nil {
|
|
log.Error("create repository notice failed: ", err)
|
|
}
|
|
}
|
|
|
|
func hasBaseURL(toCheck, baseURL string) bool {
|
|
if baseURL == "" {
|
|
return false
|
|
}
|
|
if len(baseURL) > 0 && baseURL[len(baseURL)-1] != '/' {
|
|
baseURL += "/"
|
|
}
|
|
return strings.HasPrefix(toCheck, baseURL)
|
|
}
|
|
|
|
// CheckAndEnsureSafePR will check that a given PR is safe to download
|
|
func CheckAndEnsureSafePR(pr *base.PullRequest, commonCloneBaseURL string, g base.Downloader) bool {
|
|
valid := true
|
|
// SECURITY: the patchURL must be checked to have the same baseURL as the current to prevent open redirect
|
|
if pr.PatchURL != "" && !hasBaseURL(pr.PatchURL, commonCloneBaseURL) {
|
|
// TODO: Should we check that this url has the expected format for a patch url?
|
|
WarnAndNotice("PR #%d in %s has invalid PatchURL: %s baseURL: %s", pr.Number, g, pr.PatchURL, commonCloneBaseURL)
|
|
pr.PatchURL = ""
|
|
valid = false
|
|
}
|
|
|
|
// SECURITY: the headCloneURL must be checked to have the same baseURL as the current to prevent open redirect
|
|
if pr.Head.CloneURL != "" && !hasBaseURL(pr.Head.CloneURL, commonCloneBaseURL) {
|
|
// TODO: Should we check that this url has the expected format for a patch url?
|
|
WarnAndNotice("PR #%d in %s has invalid HeadCloneURL: %s baseURL: %s", pr.Number, g, pr.Head.CloneURL, commonCloneBaseURL)
|
|
pr.Head.CloneURL = ""
|
|
valid = false
|
|
}
|
|
|
|
// SECURITY: SHAs Must be a SHA
|
|
// FIXME: hash only a SHA1
|
|
CommitType := git.Sha1ObjectFormat
|
|
if pr.MergeCommitSHA != "" && !CommitType.IsValid(pr.MergeCommitSHA) {
|
|
WarnAndNotice("PR #%d in %s has invalid MergeCommitSHA: %s", pr.Number, g, pr.MergeCommitSHA)
|
|
pr.MergeCommitSHA = ""
|
|
}
|
|
if pr.Head.SHA != "" && !CommitType.IsValid(pr.Head.SHA) {
|
|
WarnAndNotice("PR #%d in %s has invalid HeadSHA: %s", pr.Number, g, pr.Head.SHA)
|
|
pr.Head.SHA = ""
|
|
valid = false
|
|
}
|
|
if pr.Base.SHA != "" && !CommitType.IsValid(pr.Base.SHA) {
|
|
WarnAndNotice("PR #%d in %s has invalid BaseSHA: %s", pr.Number, g, pr.Base.SHA)
|
|
pr.Base.SHA = ""
|
|
valid = false
|
|
}
|
|
|
|
// SECURITY: Refs must be valid refs or SHAs
|
|
if pr.Head.Ref != "" && !git.IsValidRefPattern(pr.Head.Ref) {
|
|
WarnAndNotice("PR #%d in %s has invalid HeadRef: %s", pr.Number, g, pr.Head.Ref)
|
|
pr.Head.Ref = ""
|
|
valid = false
|
|
}
|
|
if pr.Base.Ref != "" && !git.IsValidRefPattern(pr.Base.Ref) {
|
|
WarnAndNotice("PR #%d in %s has invalid BaseRef: %s", pr.Number, g, pr.Base.Ref)
|
|
pr.Base.Ref = ""
|
|
valid = false
|
|
}
|
|
|
|
pr.EnsuredSafe = true
|
|
|
|
return valid
|
|
}
|