You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/modules/lfs
Yarden Shoham 43d1183f67
escape filename when assemble URL (#22850) (#22871)
Backport #22850

Fixes: #22843 

### Cause:

affdd40296/services/repository/files/content.go (L161)

Previously, we did not escape the **"%"** that might be in "treePath"
when call "url.parse()".


![image](https://user-images.githubusercontent.com/33891828/218066318-5a909e50-2a17-46e6-b32f-684b2aa4b91f.png)

This function will check whether "%" is the beginning of an escape
character. Obviously, the "%" in the example (hello%mother.txt) is not
that. So, the function will return a error.

### Solution:
We can escape "treePath" by call "url.PathEscape()" function firstly.

### Screenshot:

![image](https://user-images.githubusercontent.com/33891828/218069781-1a030f8b-18d0-4804-b0f8-73997849ef43.png)

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: sillyguodong <33891828+sillyguodong@users.noreply.github.com>
Co-authored-by: Andrew Thornton <art27@cantab.net>
2 years ago
..
LICENSE Git LFS support v2 (#122) 8 years ago
client.go Use `hostmatcher` to replace `matchlist`, improve security (#17605) 3 years ago
client_test.go Use `hostmatcher` to replace `matchlist`, improve security (#17605) 3 years ago
content_store.go Removed some vestigial code related to Range bounds checks (#20312) 3 years ago
endpoint.go escape filename when assemble URL (#22850) (#22871) 2 years ago
endpoint_test.go format with gofumpt (#18184) 3 years ago
filesystem_client.go Add push to remote mirror repository (#15157) 4 years ago
http_client.go Use `hostmatcher` to replace `matchlist`, improve security (#17605) 3 years ago
http_client_test.go Update HTTP status codes to modern codes (#18063) 3 years ago
pointer.go Improve SyncMirrors logging (#19045) 3 years ago
pointer_scanner_gogit.go Remove legacy `+build:` constraint (#19582) 3 years ago
pointer_scanner_nogogit.go Remove legacy `+build:` constraint (#19582) 3 years ago
pointer_test.go Fixed assert statements. (#16089) 4 years ago
shared.go Fix various documentation, user-facing, and source comment typos (#16367) 4 years ago
transferadapter.go Fix source typos (#18227) 3 years ago
transferadapter_test.go refactor: move from io/ioutil to io and os package (#17109) 3 years ago