forgejo/services
Andrew Thornton 42d2b83950
Prepend refs/heads/ to issue template refs
Fix #20456

At some point during the 1.17 cycle abbreviated refs to issue branches
started breaking. This is likely due serious inconsistencies in our
management of refs throughout Gitea - which is a bug needing to be
addressed in a different PR. (Likely more than one)

We should try to use non-abbreviated refs as much as possible. That is
where a user has inputted a abbreviated ref we should add refs/heads/ if
it is branch etc. I know people keep writing and merging PRs that remove
prefixes from stored content but it is just wrong and it keeps causing
problems like this. We should only remove the prefix at the time of
presentation as the prefix is the only way of knowing umambiguously and
permanently if the ref is referring to a branch, tag or commit. We need
to make it so that every ref has the appropriate prefix, and probably
also need to come up with some definitely unambiguous way of storing
SHAs if they're used in a ref field. We must not store potentially
ambiguous refs. (Especially tagnames - there is no reason why users cannot
create a branch with the same short name as a tag and vice versa and any
attempt to prevent this will fail. You can even create a branch and a
tag that matches a SHA1 pattern.)

To that end in order to fix this bug, when parsing issue templates check
the provided Ref, if it does not start with refs/ add the BranchPrefix
to it. This allows people to make their templates refer to a tag.

Next we need to handle the issue links that are already written. The
links here are created with `git.RefURL`

Here we see there is a bug introduced in #17551 whereby the provided Ref
can be double-escaped so we remove the incorrect external escape.
(The escape added in #17551 is in the right place - unfortunately it
missed that the calling function was doing the wrong thing.)

Then within RefURL we check if the unprefixed ref could actually be a
SHA before defaulting that an unprefixed ref is actually a commit - if not
it is assumed to be a branch. This will handle most of the problem cases
excepting the very unusual cases where someone has deliberately written
a branch to look like a SHA1.

But please if something is called a `ref` or interpreted as a `ref` make
it a full-ref before storing or using it. By all means if something is a
`branch` assume the prefix is removed but always add it back in if you
are using it as a `ref`. Stop storing abbreviated branch names and tag
names as refs. It will keep on causing problems like this.

Fix #20456

Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-07-23 11:39:36 +01:00
..
agit Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
asymkey Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
attachment Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
auth Fix various typos (#20338) 2022-07-12 23:32:37 +02:00
automerge Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
comments Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
context Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
cron Make better use of i18n (#20096) 2022-06-26 22:19:22 +08:00
externalaccount Refactor auth package (#17962) 2022-01-02 21:12:35 +08:00
forms Implement sync push mirror on commit (#19411) 2022-07-08 20:45:12 +01:00
gitdiff Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
issue Prepend refs/heads/ to issue template refs 2022-07-23 11:39:36 +01:00
lfs Move some code into models/git (#19879) 2022-06-12 23:51:54 +08:00
mailer Refactor i18n to locale (#20153) 2022-06-27 15:58:46 -05:00
migrations Add tests for the host checking logic, clarify the behaviors (#20328) 2022-07-13 09:07:16 +08:00
mirror Implement sync push mirror on commit (#19411) 2022-07-08 20:45:12 +01:00
org Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00
packages Add option to purge users (#18064) 2022-07-14 08:22:09 +01:00
pull Dismiss prior pull reviews if done via web in review dismiss (#20197) 2022-07-19 15:20:28 +02:00
release fix permission check for delete tag (#19985) 2022-06-16 22:03:03 +02:00
repository Add "X-Gitea-Object-Type" header for GET /raw/ & /media/ API (#20438) 2022-07-21 21:18:41 +02:00
task Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
user Fix: Actor is required to get user repositories (#20443) 2022-07-21 23:31:22 +02:00
webhook Add more linters to improve code readability (#19989) 2022-06-20 12:02:49 +02:00
wiki Move some helper files out of models (#19355) 2022-05-08 18:46:32 +02:00