Security
- Fixed argument injection in git and hg commands
- Fixed path traversal in archive generation
- Invalid commitish values now return 404 instead of an error page
- Added SECURITY.md
Thanks to @4n86rakam1 (Shinya Murakami) for reporting these issues.
Added
- Tabler theme, a new theme with dark mode
- Graph tab to visualize the branch graph, plus branch comparison at /{repository}/compare/{base}...{head}
- Tabbed documents on the repository index: README, Contributing, License and Security
- Metadata tab at /{repository}/metadata/{commitish}, showing hooks, .gitattributes rules, submodules, remotes and notes
Changed
- Commitish ref matching is stricter
- Packaging: build zip now includes dotfiles and leaves out all .env* files (#949) thanks @samized
Full Changelog: 3.0.0-beta2...3.0.0-beta3