- unvendor dropzone and upgrade it from 4.2.0 to 5.7.0
- make `csrf` available on window.config

* use e if it is an option
* potential nil so check err first
* check err first
* m == nil already checked

* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject

* fix upload attachments

* add migration for new column uploader_id on table attachment

* fix imports sequence

Include both a log entry and the blocked mime type in the gitea log when
an attachment upload is blocked.

Chosen log level is info; this may need to be dialed down to trace.

* Allow custom public files

* Gofmt code, lots of places not related to this pr

Moved attachments into seperate go file