Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JS requests causing HTTP basic auth popup #13759

Closed
silverwind opened this issue Nov 30, 2020 · 0 comments · Fixed by #13760
Closed

JS requests causing HTTP basic auth popup #13759

silverwind opened this issue Nov 30, 2020 · 0 comments · Fixed by #13760

Comments

@silverwind
Copy link
Member

silverwind commented Nov 30, 2020

No exact steps to reproduce but I observe the following request while clicking/selecting code in the code view:

GET https://<server>/<user>/<repo>/commit/undefined?undefined&anchor=undefined

Backend will route this request to the git+https router which in turn will ask for basic auth. We should make sure to not send such bogus requests from JS.

silverwind added a commit to silverwind/gitea that referenced this issue Nov 30, 2020
The .blob-excerpt elements don't have these data attributes in some
cases resulting in bogus http request when expanding a diff and clicking
into the expanded area. This prevents those.

Should backport to 1.13.

Fixes: go-gitea#13759
techknowlogick pushed a commit that referenced this issue Nov 30, 2020
The .blob-excerpt elements don't have these data attributes in some
cases resulting in bogus http request when expanding a diff and clicking
into the expanded area. This prevents those.

Should backport to 1.13.

Fixes: #13759
silverwind added a commit to silverwind/gitea that referenced this issue Nov 30, 2020
The .blob-excerpt elements don't have these data attributes in some
cases resulting in bogus http request when expanding a diff and clicking
into the expanded area. This prevents those.

Should backport to 1.13.

Fixes: go-gitea#13759
techknowlogick pushed a commit that referenced this issue Nov 30, 2020
The .blob-excerpt elements don't have these data attributes in some
cases resulting in bogus http request when expanding a diff and clicking
into the expanded area. This prevents those.

Should backport to 1.13.

Fixes: #13759
@go-gitea go-gitea locked and limited conversation to collaborators Jan 18, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant