fix(security): protect credentials and bound pagination #108
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/protect-user-credentials"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Refuse to adopt or overwrite credential output Secrets not owned by the originating CR, stamp retained ForgejoUser credential ownership, and cap all pagination at 100 pages. Includes red/green ownership and unending-pagination tests.