Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-03-19 | Update VERSION to 8.15.8v8.15.88-15-stable | James Lopez | |
2017-03-19 | Update CHANGELOG.md for 8.15.8 | James Lopez | |
[ci skip] | |||
2017-03-19 | Fix more broken specs | Ruben Davila | |
2017-03-19 | Fix broken specs | Ruben Davila | |
2017-03-18 | Merge branch 'ssrf' into 'security' | Rubén Dávila | |
nil check for url_blocker? See merge request !2076 | |||
2017-03-18 | Merge branch 'render-json-leak' into 'security' | DJ Mountney | |
fix for render json include leaks See merge request !2074 Conflicts: app/controllers/projects/merge_requests_controller.rb spec/controllers/projects/issues_controller_spec.rb | |||
2017-03-18 | Merge branch 'fix-links-target-blank' into 'security' | Jacob Schatz | |
Adds rel="noopener noreferrer" to all links with target="_blank" See merge request !2071 Conflicts: app/assets/javascripts/environments/components/environment_external_url.js app/assets/javascripts/merge_request_widget.js app/helpers/commits_helper.rb app/views/profiles/show.html.haml app/views/projects/services/mattermost_slash_commands/_detailed_help.html.haml app/views/projects/services/mattermost_slash_commands/_help.html.haml app/views/projects/services/slack_slash_commands/_help.html.haml | |||
2017-03-18 | Merge branch 'ssrf' into 'security' | Douwe Maan | |
Protect server against SSRF in project import URLs See merge request !2068 Conflicts: spec/models/project_spec.rb | |||
2017-03-18 | Merge branch '28058-hide-emails-in-atom-feeds' into 'security' | Rémy Coutable | |
Only show public emails in atom feeds See merge request !2066 | |||
2017-03-10 | Fix 2.3.3 ruby shasum | James Lopez | |
2017-02-16 | Update VERSION to 8.15.7v8.15.7 | DJ Mountney | |
2017-02-16 | Update CHANGELOG.md for 8.15.7 | DJ Mountney | |
[ci skip] | |||
2017-02-15 | Update VERSION to 8.15.6v8.15.6 | Robert Speicher | |
2017-02-15 | Update CHANGELOG.md for 8.15.6 | Robert Speicher | |
[ci skip] | |||
2017-02-14 | Fix small rubocop issue | Ruben Davila | |
2017-02-14 | Fix migration with missing DOWNTIME entry | Ruben Davila | |
2017-02-14 | Merge branch 'fix-github-import-MR-wrong-project' into 'security' | Robert Speicher | |
Fix labels being applied to wrong merge requests on GitHub import See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2064 | |||
2017-02-14 | Merge branch 'svg-xss-fix' into 'security' | Robert Speicher | |
Fix for XSS vulnerability in SVG attachments See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2059 | |||
2017-02-14 | Merge branch 'fix-rdoc-xss' into 'security' | Robert Speicher | |
Fix XSS in rdoc and other markups See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2058 | |||
2017-02-14 | Merge branch 'asciidoctor-xss-patch' into 'security' | Robert Speicher | |
Add sanitization filter to asciidocs output to prevent XSS See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2057 | |||
2017-01-20 | Update VERSION to 8.15.5v8.15.5 | Robert Speicher | |
2017-01-20 | Update CHANGELOG.md for 8.15.5 | Robert Speicher | |
[ci skip] | |||
2017-01-20 | Add a changelog entry for #26242 | Robert Speicher | |
2017-01-20 | Merge branch 'upgrade-omniauth' into 'security' | Robert Speicher | |
Upgrade OmniAuth Ruby gem to 1.3.2 Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/26813 See merge request !2056 | |||
2017-01-20 | Merge branch 'fix-guest-access-posting-to-notes' into 'security' | Robert Speicher | |
Prevent users from creating notes on resources they can't access See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2054 | |||
2017-01-20 | Merge branch 'fix-api-mr-permissions' into 'security' | Robert Speicher | |
Ensure that only privileged users can access merge requests in the API See merge request !2053 | |||
2017-01-20 | Merge branch 'fix/rename-group-export-vuln' into 'security' | Robert Speicher | |
Fix export files not removed when a user takes over a namespace See merge request !2051 | |||
2017-01-20 | Merge branch 'fix-users-deleting-public-deployment-keys' into 'security' | Robert Speicher | |
Fix users being able to delete instance public deployment keys See merge request !2049 | |||
2017-01-10 | Merge commit 'dev/8-15-stable' into 8-15-stable | Ruben Davila | |
2017-01-10 | Update VERSION to 8.15.4v8.15.4 | Douglas Barbosa Alexandre | |
2017-01-10 | Update CHANGELOG.md for 8.15.4 | Douglas Barbosa Alexandre | |
[ci skip] | |||
2017-01-09 | Merge branch 'patch-turbolinks' into 'security' | Robert Speicher | |
Updated Turbolinks to patched version of turbolinks-classic See merge request !2048 | |||
2017-01-09 | Merge branch 'update-gitlab-markup-gem' into 'master' | Douglas Barbosa Alexandre | |
Update the gitlab-markup gem to the version `1.5.1` See merge request !8509 | |||
2017-01-09 | Merge branch 'fix-plain-text-emails' into 'master' | Robert Speicher | |
Use #parts instead of #part to read all the parts of the Message. Closes #26463 See merge request !8507 | |||
2017-01-09 | Merge branch 'support-google-cloud-storage-backups' into 'master' | Stan Hu | |
Re-add Google Cloud Storage as a backup strategy Closes #26362 See merge request !8481 | |||
2017-01-09 | Merge branch '26051-fix-missing-endpoint-route-method' into 'master' | Rémy Coutable | |
Don't instrument 405 Grape calls Closes #26051 See merge request !8445 | |||
2017-01-09 | Merge branch 'speed-up-group-milestone-index' into 'master' | Sean McGivern | |
Speed up group milestone index by passing group_id to IssuesFinder See merge request !8363 | |||
2017-01-09 | Merge branch 'update-gitea-importer-doc' into 'master' | Rémy Coutable | |
With Gitea v1.0.0, notes are imported See merge request !8298 | |||
2017-01-09 | Merge branch '26014-fix-update-doc' into 'master' | Achilleas Pipinellis | |
Re-order update steps in the 8.14 -> 8.15 upgrade guide Closes #26014 See merge request !8287 | |||
2017-01-09 | Merge branch 'remove-successful-pipeline-emails-for-now' into 'master' | Sean McGivern | |
Make successful pipeline emails off for watchers Closes #24845 See merge request !8176 | |||
2017-01-06 | Update VERSION to 8.15.3v8.15.3 | Douglas Barbosa Alexandre | |
2017-01-06 | Update CHANGELOG.md for 8.15.3 | Douglas Barbosa Alexandre | |
[ci skip] | |||
2017-01-06 | Merge branch 'fix-users-api-500-error' into 'master' | Rémy Coutable | |
Fix 500 errors when creating a user with identity via API Closes #26295 See merge request !8442 | |||
2017-01-06 | Merge branch 'dz-whitelist-some-project-names' into 'master' | Rémy Coutable | |
Whitelist next project names: assets, profile, public See merge request !8470 | |||
2017-01-06 | Merge branch 'set_ldap_config_attributes_defaults' into 'master' | Rémy Coutable | |
LDAP attributes needs default values See merge request !8465 | |||
2017-01-05 | Merge branch 'minor-pipeline-graph-beautyfixes' into 'master' | Fatih Acet | |
big and mini pipeline css changes See merge request !8224 | |||
2017-01-05 | Merge branch '26218-rety-button-pipeline-builds-name-drodown-broken' into ↵ | Fatih Acet | |
'master' Increases pipeline graph drowdown width in order to prevent strange position on chrome on ubuntu Closes #26218 See merge request !8399 | |||
2017-01-05 | Merge branch 'issue_25889' into 'master' | Sean McGivern | |
Revert MattermostNotificationService and SlackNotificationService to MattermostS… Closes #25889 See merge request !8240 | |||
2017-01-05 | Merge branch 'fix/group-path-rename-error' into 'master' | Douwe Maan | |
Fix error 500 renaming group. Also added specs and changelog. Closes #17922 and #23223 See merge request !8201 | |||
2017-01-05 | Merge branch 'fix/cross-project-ref-path' into 'master' | Sean McGivern | |
Fix cross-project references copy to include the project reference Closes #25890 See merge request !8232 |