Multiple JSONs returned when doing DELETE on /v1/user/keys/2 with a non-existing key #19398
Labels
issue/confirmed
Issue has been reviewed and confirmed to be present or accepted to be implemented
modifies/api
This PR adds API routes or modifies them
type/bug
Milestone
Description
While doing some fuzzing using https://github.com/Endava/cats I discovered an issue for the
/v1/user/keys/
endpoint. Doing a DELETE with non existing key return 2 JSONs in the same body.You can reproduce the issue using (just replace $token with your own token):
cats replay Test243.json
Or doing a curl at
https://try.gitea.io/api/v1/user/keys/2
for example.Test243.json.zip
Gitea Version
1.17.0+dev-423-g4396d0e7c
Can you reproduce the bug on the Gitea demo site?
Yes
Log Gist
No response
Screenshots
No response
Git Version
No response
Operating System
No response
How are you running Gitea?
Using https://try.gitea.io/.
Database
No response
The text was updated successfully, but these errors were encountered: