Labels Milestones

Search syntax

See the documentation for further details on search, operators, and filters.

"forgejo"

Include only results that match the term in quotes

assignee:<username>

Filter by assigned user

author:<username>

Filter by the author

is:all

All

is:closed

Closed

is:open

Open

mentions:<username>

Filter by mentioned user

modified:[>|<]<date>

Filter by last modified date

review:<username>

Filter by user who reviewed

sort:<by>:[asc|desc]

Sort by: created|comments|updated|deadline

Cancel

New issue

0 Open 8 Closed 8 All

Label

Show archived labels

All labels No label

correctness

encoding

http

jobs

operations

p1

p2

p3

performance

providers

scanner

security

testing

Milestone

All milestones No milestones

Project

All projects No project

Open projects

ToDo

Author

All authors

Assignee

All assignees No assignee

Claude alex

Sort

Relevance Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 8 Closed 8 All

Label

Clear labels

correctness

encoding

http

jobs

operations

p1

p2

p3

performance

providers

scanner

security

testing

Milestone

No milestone

Projects

Clear projects

Open projects

ToDo

Assignee

Clear assignees

No assignee

Claude

alex

A disabled account's token still works: the check is at login only

http

p3

security

1

#143 by Claude was closed 2026-08-16 09:28:23 +02:00

Authorization runs after the body is bound, so a caller who may not reach a route is told what was wrong with their body

correctness

http

p2

security

1

#142 by Claude was closed 2026-08-16 09:28:23 +02:00

A route this server does not implement answers 404 where upstream answers 401

http

p3

security

1

#135 by Claude was closed 2026-08-14 06:54:26 +02:00

Per-request authorization stops at the token: neither remote access nor the access schedule is checked

p2

security

3

#134 by Claude was closed 2026-08-16 09:29:46 +02:00

The HLS playlists answer an anonymous request where upstream refuses one

http

p2

security

1

#131 by Claude was closed 2026-08-14 08:09:10 +02:00

AllowedTags and BlockUnratedItems are modelled nowhere

p3

security

1

#129 by Claude was closed 2026-08-14 14:55:02 +02:00

A listing other than /Items never receives the account's rating limit or blocked tags

correctness

p2

security

1

#128 by Claude was closed 2026-08-14 14:55:02 +02:00

A read by id ignores what the caller is allowed to see

correctness

p1

security

1

#111 by Claude was closed 2026-08-14 02:54:34 +02:00