wrolpi/modules
Roland d0ea6ab313
repos: a clone is owned by a random token, not its URL
The ownership marker held the Repo's URL key, which anyone can write, so
a copied clone, an extracted archive or a hand-made `.git` passed the
check and was reset and cleaned.  Each Repo now has a random clone_token
(repository column and repos.yaml, so a Repo restored from the config
still owns its clone); the marker holds it, and only a clone holding the
Repo's token is updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-06 18:58:18 -06:00
..
archive db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
docs db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
flasher db: request-path library functions use the request's connection (#774) 2026-10-04 11:05:20 -06:00
inventory Strip whitespace from inventory item string values on save 2026-07-30 17:34:46 -06:00
map Map previews that never drew, and a Docker map with no world under it (#658) 2026-08-11 20:37:23 -06:00
repos repos: a clone is owned by a random token, not its URL 2026-10-06 18:58:18 -06:00
videos db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
zim db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
__init__.py Add a Repos module that mirrors git repositories (backend) 2026-10-06 16:56:09 -06:00