401 when attempting to unfold hidden code in diffs #6102

Closed
opened 2025-11-02 06:45:11 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @Ibmurai on GitHub (Oct 6, 2020).

  • Gitea version (or commit ref): 1.12.4 built with GNU Make 4.2.1, go1.14.8 : bindata, sqlite, sqlite_unlock_notify
  • Git version: 2.24.3
  • Operating system: Ubuntu 18.04.5 / Docker 19.03.12, build 48a66213fe
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

Whenever we click the code folding icon, i.e. <svg class="svg octicon-fold" width="16" height="16" aria-hidden="true"><use xlink:href="#octicon-fold"></use></svg>, a standard HTTP auth login modal dialog appears.

When we cancel that dialog, the log shows 401 errors on resources like these: http://gitea.internal/org/repo/pulls/794/undefined?undefined&anchor=undefined

Screenshots

I would if I could, but I believe my description is very precise.

Originally created by @Ibmurai on GitHub (Oct 6, 2020). <!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 1.12.4 built with GNU Make 4.2.1, go1.14.8 : bindata, sqlite, sqlite_unlock_notify - Git version: 2.24.3 - Operating system: Ubuntu 18.04.5 / Docker 19.03.12, build 48a66213fe - Database (use `[x]`): - [ ] PostgreSQL - [x] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [ ] Not relevant - Log gist: ## Description Whenever we click the code folding icon, i.e. `<svg class="svg octicon-fold" width="16" height="16" aria-hidden="true"><use xlink:href="#octicon-fold"></use></svg>`, a standard HTTP auth login modal dialog appears. When we cancel that dialog, the log shows 401 errors on resources like these: `http://gitea.internal/org/repo/pulls/794/undefined?undefined&anchor=undefined` ## Screenshots I would if I could, but I believe my description is very precise.
Author
Owner

@wxiaoguang commented on GitHub (Apr 14, 2022):

Outdated, the code has changed a lot.

@wxiaoguang commented on GitHub (Apr 14, 2022): Outdated, the code has changed a lot.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#6102