Basavaraj S mandwxiaoguang 18d0ee174d fix(mailer): reject incoming email tokens of users who cannot sign in (#39833) ...

Incoming email reply tokens are embedded in every notification email and
stay valid for a year. `DecodeToken` verifies them with `user.Rands`,
which is not rotated when an admin disables sign-in or the account is
deactivated, and `ReplyHandler` only checks repo read permission. A
suspended user could therefore keep posting comments, review comments
and attachments on any public repo by replying to old notifications,
while the web, API, git and package paths all refuse them. `DecodeToken`
now rejects tokens of users who are inactive or prohibited from signing
in, which covers every incoming mail handler.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-10-18 10:20:00 +00:00

..

icons

enhance: improve e-mail templates (#38396)

2026-09-09 17:58:27 +00:00

incoming

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

sender

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

token

fix(mailer): reject incoming email tokens of users who cannot sign in (#39833)

2026-10-18 10:20:00 +00:00

mail_comment.go

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

mail_issue_common.go

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

mail_issue.go

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

mail_release_test.go

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

mail_release.go

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

mail_repo.go

feat: manage bot accounts from the admin UI, API and CLI (#38966)

2026-09-18 12:43:36 +00:00

mail_team_invite.go

enhance: improve e-mail templates (#38396)

2026-09-09 17:58:27 +00:00

mail_test.go

enhance: allow custom watches to bypass on-mention email restriction (#39652)

2026-10-18 09:23:12 +00:00

mail_user.go

feat: manage bot accounts from the admin UI, API and CLI (#38966)

2026-09-18 12:43:36 +00:00

mail_workflow_run_test.go

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

mail_workflow_run.go

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

mail.go

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

mailer.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

main_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

notify.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00