jochen ea772a9cce Let gitea_api send only the query keys it needs, never sudo, and never approve a pull request ...

The confirmation review of 2026-10-09 measured GET /user?sudo=… answer the
operator's own account: the query went to the forge unjudged, and the tools'
token is the site administrator's, so any caller could act as any user.
gitea_api now sends only allow-listed query keys and refuses sudo in any case,
and a review that approves or requests changes is the operator's.

2026-10-09 12:57:16 +02:00

..

index.ts

Let gitea_api send only the query keys it needs, never sudo, and never approve a pull request

2026-10-09 12:57:16 +02:00