Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-04-08[Rails5] Add `safe_params` helperblackst0ne
Rails 5.0 requires to explicitly permit attributes when building a URL using current `params` object. The `safe_params` helper allows developers to just call `safe_params.merge(...)` instead of manually adding `permit` to every call. https://github.com/rails/rails/pull/20868
2018-04-04Add better LDAP connection handlingFrancisco Javier López
2018-02-28Moved o_auth/saml/ldap modules under gitlab/authHoratiu Eugen Vlad
2018-02-22Port `read_cross_project` ability from EEBob Van Landuyt
2018-02-02use Gitlab::UserSettings directly as a singleton instead of ↵Mario de la Ossa
including/extending it
2018-01-24Return a blank JSON response for a missing .js file to prevent Rails CSRF errorsStan Hu
The default 404 handler would return the Content-Type format based on the given format extension. This would cause the Rails CSRF protection to flag an error, since the .js extension gets mapped to text/javascript format. Closes #40771
2017-11-23Allow password authentication to be disabled entirelyMarkus Koller
2017-11-20Impersonation no longer gets stuck on password change.Tiago Botelho
2017-11-20Merge branch '18040-rubocop-line-break-after-guard-clause' into 'master'Rémy Coutable
Adds Rubocop rule for line break after guard clause Closes #18040 See merge request gitlab-org/gitlab-ce!15188
2017-11-17Applied some code review commentsFrancisco Lopez
2017-11-17Some fixes after rebaseFrancisco Lopez
2017-11-17Fix OAuth API and RSS rate limitingMichael Kozono
2017-11-17Add request throttlesMichael Kozono
2017-11-16Adds Rubocop rule for line break after guard clauseJacopo
Adds a rubocop rule (with autocorrect) to ensure line break after guard clauses.
2017-11-02Remove authentication using user.private_tokenDouwe Maan
2017-10-20URI decode Page-Title header to preserve UTF-8 charactersToon Claes
2017-10-04Fix username and ID not logging in production_json.log for Git activityStan Hu
Devise sets `current_user`, but not all controllers authenticate users by session tokens. Try to use the controller-defined `authenticated_user` if `current_user` is not available. Closes gitlab-org/gitlab-ee#3611
2017-09-26Encode Page-Title header as ISO-8859-1Douwe Maan
2017-09-26Add Page-Title header to tree and blob JSON endpointsDouwe Maan
2017-09-01Rollsback changes made to signing_enabled.Tiago Botelho
2017-08-09Enable the Layout/SpaceBeforeBlockBraces copRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-08-07GRPC::Unavailable (< GRPC::BadStatus) is wrapped in a CommandErrorBob Van Landuyt
2017-08-04Add a Circuitbreaker for storage pathsBob Van Landuyt
2017-07-28Add remote IP, user ID and username to JSON lograge outputStan Hu
This makes the logs a bit more useful to search requests by users.
2017-07-13Fixes needed when GitLab sign-in is not enabledRobin Bobbitt
When sign-in is disabled: - skip password expiration checks - prevent password reset requests - don’t show Password tab in User Settings - don’t allow login with username/password for Git over HTTP requests - render 404 on requests to Profiles::PasswordsController
2017-07-06Allow to enable the performance bar per user or Flipper groupRémy Coutable
A `performance_team` Flipper group has been created. By default this group is nil but this can be customized in `gitlab.yml` via the performance_bar.allowed_group setting. Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-07-05Log rescued exceptions to SentryStan Hu
Support noticed that a number of exceptions, such as "Encoding::CompatibilityError (incompatible character encodings: UTF-8 and ASCII-8BIT)", failed to report to Sentry. The `rescue_from` in the ApplicationController prevented these exceptions from being recorded. This change ensures that these exceptions are properly captured.
2017-06-20Add rescue_from(ActionController::UnknownFormat) in Application ControllerPawel Chojnacki
2017-06-09Fix linting, route, and specsRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-06-09Small adjustmentsRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-06-09Don't use Pygment,rb, use Rouge instead, and put peek-pg in the :postgres groupRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-06-09New performance bar that can be enabled with the `p b` shortcutRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-05-25Merge branch '32748-emails-are-being-sent-with-the-wrong-language' into 'master'Douwe Maan
Bugfix: Always use the default language when generating emails. Closes #32748 See merge request !11662
2017-05-25Bugfix: Always use the default language when generating emails.Ruben Davila
There was a race condition issue when the application was generating an email and was using a language that was previously being used in other request.
2017-05-24atom links with rss token instead of private tokenAlexis Reigel
2017-05-09Merge request widget redesignFatih Acet
2017-05-05Redirect from redirect routes to canonical routesMichael Kozono
2017-05-04More updates for translations plus some refactoring.Ruben Davila
2017-05-03First round of updates from the code review.Ruben Davila
2017-05-02Merge branch 'master' into 28433-internationalise-cycle-analytics-pageRuben Davila
2017-04-28Resolve "Add more tests for spec/controllers/projects/builds_controller_spec.rb"Dosuken shinya
2017-04-20Fix Rubocop complains plus some small refactorRuben Davila
2017-04-13Set locale through controller filterRuben Davila
2017-04-06Extract 2FA-related code from ApplicationControllerMarkus Koller
2017-04-06Support 2FA requirement per-groupMarkus Koller
2017-04-06Move AuthHelper#two_factor_skippable? into ApplicationControllerMarkus Koller
2017-03-22Don't try to find a user by personal_access_token if the token is nilRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-03-09use the policy stack to protect loginshttp://jneen.net/
2017-03-09use a magic default :global symbol instead of nilhttp://jneen.net/
to make sure we mean the global permissions
2017-03-06Make Warden set_user hook validate user ip uniqunessPawel Chojnacki
+ rename shared context