Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-07-20 | Update VERSION to 9.0.11v9.0.11 | James Edwards-Jones | |
2017-07-20 | Update CHANGELOG.md for 9.0.11 | James Edwards-Jones | |
[ci skip] | |||
2017-07-19 | Merge branch '24570-use-re2-for-user-supplied-regexp-9-0' into 'security-9-0' | Douwe Maan | |
[security-9-0] Use re2 for user-supplied regexps See merge request !2122 | |||
2017-07-19 | Merge branch '33303-9-0-security-fix' into 'security-9-0' | Sean McGivern | |
[9.0 security fix] Renders 404 if given project is not readable by the user on Todos dashboard See merge request !2135 | |||
2017-07-19 | Merge branch 'bvl-security-9-0-remove-appearance-symlink' into 'security-9-0' | Douwe Maan | |
(security-9-0) Remove the `appearance` symlink that was previously missed See merge request !2127 | |||
2017-07-19 | Merge branch 'fix-changelog-entry' into 'security-9-2' | Sean McGivern | |
Fix filename used for CHANGELOG entry See merge request !2140 | |||
2017-07-19 | Merge branch ↵ | Sean McGivern | |
'security-9-0-backport-33323-fix-incorrect-project-authorizations' into 'security-9-0' Escape the underscore char inside the LIKE operator See merge request !2133 | |||
2017-06-07 | Update VERSION to 9.0.10v9.0.10 | Regis | |
2017-06-07 | Update CHANGELOG.md for 9.0.10 | Regis | |
[ci skip] | |||
2017-06-07 | Merge branch 'bvl-fix-typo-renaming-appearance' into 'security-9-2' | Douwe Maan | |
Fix typo in moving the`appearance` folder in migrations See merge request !2116 | |||
2017-06-03 | Update VERSION to 9.0.9v9.0.9 | Regis | |
2017-06-03 | Update CHANGELOG.md for 9.0.9 | Regis | |
[ci skip] | |||
2017-06-03 | fix double method definition for can_read-reference | Regis | |
2017-06-03 | Merge branch '25934-project-snippet-vis' into 'security-9-2' | Douwe Maan | |
Fix visibility when referencing snippets See merge request !2101 | |||
2017-06-03 | Merge branch 'fix-security-9-0-conflicts-for-mr-2112' into 'security-9-0' | Regis Boudinot | |
Fix conflicts while picking !2112 to `security-9-0` See merge request !2113 | |||
2017-06-01 | Update VERSION to 9.0.8v9.0.8 | Regis | |
2017-06-01 | Update CHANGELOG.md for 9.0.8 | Regis | |
[ci skip] | |||
2017-05-31 | Only check new migrations in 'rake down_timecheck' | Douwe Maan | |
This is necessary for the `security-9-0` build to pass. | |||
2017-05-31 | Merge branch 'dz-restrict-autocomplete' into 'security-9-1' | Robert Speicher | |
Allow users autocomplete by author_id only for authenticated users See merge request !2100 | |||
2017-05-31 | Merge branch '28917-contain-uploads-in-system-dir' into 'security' | Douwe Maan | |
Upload files into `public/upload/system` instead of `public/upload` See merge request !2073 | |||
2017-05-31 | Merge branch 'dz-api-x-frame' into 'security-9-2' | Robert Speicher | |
Restrict API X-Frame-Options to same origin See merge request !2103 | |||
2017-05-30 | Revert "Merge remote-tracking branch 'dev/security-9-0' into 9-0-stable" | Timothy Andrew | |
This reverts commit f6ba1e081c96bd0a8c3561d92f97aa11d6688bc5, reversing changes made to 810cc51be37e03ebbe99711a53663956e4ffde8c. | |||
2017-05-30 | Merge remote-tracking branch 'dev/security-9-0' into 9-0-stable | Timothy Andrew | |
2017-05-26 | Only check new migrations in 'rake down_timecheck' | Douwe Maan | |
This is necessary for the `security-9-0` build to pass. | |||
2017-05-26 | Merge branch 'dz-restrict-autocomplete' into 'security-9-1' | Robert Speicher | |
Allow users autocomplete by author_id only for authenticated users See merge request !2100 | |||
2017-05-26 | Merge branch '28917-contain-uploads-in-system-dir' into 'security' | Douwe Maan | |
Upload files into `public/upload/system` instead of `public/upload` See merge request !2073 | |||
2017-05-26 | Merge branch 'dz-api-x-frame' into 'security-9-2' | Robert Speicher | |
Restrict API X-Frame-Options to same origin See merge request !2103 | |||
2017-05-05 | Update VERSION to 9.0.7v9.0.7 | Lin Jen-Shin | |
2017-05-05 | Update CHANGELOG.md for 9.0.7 | Lin Jen-Shin | |
[ci skip] | |||
2017-05-04 | Fix test error | Lin Jen-Shin | |
2017-05-04 | Merge branch 'tc-fix-private-subgroups-shown' into 'security' | Douwe Maan | |
Use GroupsFinder to find subgroups the user has access to See merge request !2096 | |||
2017-05-04 | Merge branch 'fix-hamlit-xss' into 'security-9-1' | Robert Speicher | |
New Hamlit XSS fix, does not include extraneous changes See merge request !2095 | |||
2017-05-04 | Merge branch 'snippets-finder-visibility' into 'security' | Douwe Maan | |
Refactor snippets finder & dont return internal snippets for external users See merge request !2094 | |||
2017-05-04 | Merge branch 'branch-name-escape' into 'security' | Robert Speicher | |
Fix XSS in branches dropdown See merge request !2093 | |||
2017-05-04 | Merge branch '31157-respect-project-features-in-wiki-search' into 'security' | Douwe Maan | |
Respect project features in wiki and blob search See merge request !2089 | |||
2017-05-04 | Merge branch 'snippets_visibility' into 'security' | Sean McGivern | |
Fix snippets visibility for show action - external users can not see internal snippets See merge request !2087 | |||
2017-05-04 | Merge branch 'rs-sanitize-submodule-urls' into 'security' | Douwe Maan | |
Sanitize submodule URLs before linking to them in the file tree view See merge request !2084 | |||
2017-05-04 | Merge branch 'bvl-markup-pipeline' into 'security' | Robert Speicher | |
Render asciidoc & other markup using banzai in a pipeline See merge request !2088 | |||
2017-05-04 | Merge branch 'bvl-validate-urls-in-markdown-using-uri' into 'security' | Robert Speicher | |
Add correct `rel` attributes to external links when rendering markdown See merge request !2086 | |||
2017-04-21 | Update VERSION to 9.0.6v9.0.6 | James Lopez | |
2017-04-21 | Update CHANGELOG.md for 9.0.6 | James Lopez | |
[ci skip] | |||
2017-04-21 | Merge branch '30779-show-mr-subnav-issue-tracker' into 'master' | Alfredo Sumaran | |
Show sub-nav under Merge Requests when issue tracker is non-default Closes #30779 See merge request !10658 | |||
2017-04-21 | Merge branch 'no-downtime-check-stable' into 'master' | Robert Speicher | |
Don't run the downtime check on stable branches, or tags/master See merge request !10794 | |||
2017-04-20 | Merge branch 'fix-dropdown-spec-failure-pipeline' into '9-0-stable' | James Lopez | |
Fix dropdown spec failure pipeline See merge request !10829 | |||
2017-04-20 | Fix dropdown spec failure for merge when pipeline succeedsfix-dropdown-spec-failure-pipeline | Jose Ivan Vargas | |
2017-04-20 | Merge branch 'fix/29125' into 'master' | Sean McGivern | |
Port of fix/29125-ee to CE Closes #29125 See merge request !10796 | |||
2017-04-20 | Merge branch 'plantuml-filter-after-highlight' into 'master' | Sean McGivern | |
Fix PlantUML integration in GFM Closes #30557 See merge request !10651 | |||
2017-04-20 | Merge branch '31137-ensure-yarn-installed' into 'master' | Alfredo Sumaran | |
Remove node modules cache because we already use artifacts Closes #29226 and #31137 See merge request !10781 | |||
2017-04-19 | fix migration | James Lopez | |
2017-04-19 | fix migration | James Lopez | |