Commit Graph

214 Commits

Author SHA1 Message Date
Ming Deng 650fde66aa Revert "Merge pull request #4254 from astaxie/develop-2.0"
This reverts commit e284b0ddae, reversing
changes made to 8ef8fd2606.
2020-11-26 17:48:29 +08:00
Ming Deng b4a85c8f13 Remove files 2020-08-16 23:09:19 +08:00
Ming Deng c22af4c611 Fix Tracing and prometheus bug 2020-08-11 03:23:38 +00:00
Ming Deng aa3987f816 Merge remote-tracking branch 'origin/develop' into ftr/middleware 2020-08-04 22:26:01 +08:00
Ming Deng a0d1c42dac XSRF add secure and http only flag 2020-08-03 21:04:33 +08:00
Ming Deng ebc0207909
Merge pull request #4096 from jianzhiyao/request_context
fix memory leak of request context
2020-07-27 18:04:37 +08:00
jianzhiyao 2386c9c80d delete useless if-stmt 2020-07-26 22:37:42 +08:00
jianzhiyao cfff0f3b46 fix memory leak of request context 2020-07-25 00:00:34 +08:00
playHing 3e2c795410 Rlock for form query 2020-07-15 20:44:59 +08:00
playHing 55e6298f29 Fix concurrent form parsing and getting 2020-07-15 20:44:59 +08:00
playHing b50fb44950 Add bench test on context input query 2020-07-15 20:44:59 +08:00
Ming Deng 6c0db4db3d Using HTMLEscapeString in adminui.go to avoid XSS attack 2020-06-19 21:49:17 +08:00
Ming Deng 86935ada01
Merge pull request #3943 from zhlicen/master
#3942 fix encoded url(with slash) router match problem
2020-06-18 16:04:16 +08:00
HANG ZHOU 0aa82d875a
Update input.go 2020-03-05 14:46:17 +00:00
BurtonQin cfdd1cd5be cache, context, session: add lock to fix inconsistent field protection 2020-02-10 21:49:46 +08:00
wang yan a768bf8f00 update hash algorithm for signing the cookie for xsrf token
Due to the chosen-prefix collision in SHA-1(details at https://sha-mbles.github.io/), SHA-1 hash functions should to be deprecated and SHA-2/SHA-3 should be used instead.

Signed-off-by: wang yan <wangyan@vmware.com>
2020-02-06 17:31:24 +08:00
Wenkai Yin 793047097c Abort with the pre-defined status code when handling XSRF error
As the status codes(422 and 417) are set in the error map, abort with them directly to active the pre-defined error handlers

Signed-off-by: Wenkai Yin <yinw@vmware.com>
2019-11-19 18:55:54 +08:00
Wusuluren b17e49e6aa fix concurrent map access problem on BeegoInput.data 2019-06-09 22:09:38 +08:00
JessonChan 1c893996c0 improve the download func code 2019-01-23 12:36:14 +08:00
JessonChan a9ffc2a078 https://github.com/astaxie/beego/issues/3446
Use UTF-8 as the encoding of the "filename*" parameter, when
                           present, because at least one existing implementation only
                           implements that encoding.
2019-01-23 12:30:57 +08:00
wanghui b021686521
Add .Elapsed in context.ResponseWriter for monitor purpose
With this commit we can record per requests's elapsed time,
so we can easy to monitor that by use a filter.
2018-11-19 16:38:14 +08:00
Ruben Cid 755cc98ef7 Fix content type 2018-08-21 12:32:16 +02:00
Ruben Cid 5c407ff2e3 Add map shortcut and ServeFormatted method in output 2018-08-20 22:55:50 +02:00
Ruben Cid 48e6658eca Add access to pusher 2018-08-03 12:33:46 +02:00
astaxie 5ba9e63086
Merge branch 'develop' into feature/YAML 2018-07-20 23:24:51 +08:00
astaxie 67d9241abc
Merge pull request #3171 from whomm/master
debug stringsToJSON
2018-06-23 22:50:11 +08:00
astaxie d3d97de312
Merge pull request #3200 from openset/master
Update: use PathEscape replace QueryEscape
2018-06-12 22:45:14 +08:00
Sandy bf915c3280
Update: use PathEscape replace QueryEscape
If filename contain space(" "), QueryEscape use "+" instead.
2018-06-12 16:15:20 +08:00
Ruben Cid 7c80bf6f9d Add YAML 2018-05-30 16:06:40 +02:00
whomm e96ae0c24a debug stringsToJSON
json char: \u four-hex-digits number(http://json.org/)
2018-05-21 15:18:18 +08:00
astaxie e96a5fb3ca
Merge pull request #3115 from m4grio/minor-typo
Amend a very minor typo in a variable name
2018-04-20 19:26:42 +08:00
Mario Álvarez 5fb29cb772
Amend a very minor typo in a variable name 2018-04-10 12:19:50 +08:00
Pritesh Gudge aac69674ad
Update Documentation in Output.go
Fix Documentation for HTTP status codes descriptions.
2017-12-21 13:50:28 +05:30
astaxie c56704f3fd Merge branch 'master' into develop 2017-10-14 17:53:40 +08:00
LI Daobing 9b57566963 fix typo 2017-10-11 14:35:31 +08:00
astaxie a7354d2d08 Revert "should use time.Since instead of time.Now().Sub" 2017-09-09 06:29:38 +08:00
wangguoliang c8c25549e7 should use time.Since instead of time.Now().Sub
Signed-off-by: wgliang <liangcszzu@163.com>
2017-09-07 19:01:34 +08:00
mlgd 166e88c103 Update input.go 2017-08-09 21:05:06 +02:00
mlgd 51b6adeb24 Add IPV6 compatibility 2017-08-09 10:23:03 +02:00
MiskoLee 29bcd31b27 supported gzip for req.Header has `Content-Encoding: gzip` 2017-07-10 21:27:54 +08:00
astaxie 7ec819deed fix #2725 big form 2017-07-04 21:16:59 +08:00
eyalpost 8b504e7d51 incorrect error rendering (wrong status) 2017-06-12 21:05:40 +03:00
Eyal Post 11b4bf8aaa move to context 2017-05-18 10:38:12 +03:00
Eyal Post 2513bcf584 remove Redirect to avoid confusion 2017-05-18 10:32:51 +03:00
Eyal Post 3e51823c0f move response 2017-05-18 09:05:49 +03:00
Eyal Post e32a18203b fix gosimple 2017-05-17 21:27:32 +03:00
Eyal Post 828cbbdf5d Refactor a bit to consolidate packages 2017-05-17 20:38:59 +03:00
Eyal Post d54cd4fa5f Merge remote-tracking branch 'upstream/develop' into develop 2017-05-17 20:02:40 +03:00
eyalpost 1004678005 popular status codes 2017-05-12 09:57:56 +03:00
eyalpost 0ac2e47162 location=>paramType 2017-05-12 09:28:46 +03:00