base-layer/releasekit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

Limit release asset redirects

Browse Source
This commit is contained in:
Eric Rakestraw
2026-11-02 03:28:24 +00:00
parent 23b3a3d340
commit 76676ee5a6
4 changed files with 98 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/integrations/gitea.md
View File

@@ -87,7 +87,8 @@ Unknown-write outcomes are reserved for unresolved writes. Unrelated attachments
Attachment downloads and redirects carry the Gitea authorization token only
when their scheme, host, and port match the configured service. Cross-origin
content is downloaded without that token and verified by its digest.
content is downloaded without that token and verified by its digest. Downloads
follow at most ten redirects; an additional redirect is unverifiable.
Shared delivery uploads only after inspection finds no conflicts or
unverifiable assets. It uploads missing binaries in filename order and then the