Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-05-01Allow `graphs` & `refs` project namesBob Van Landuyt
2017-05-01Minor style adjustmentsBob Van Landuyt
2017-05-01Use `%r{}` regexes to avoid having to escape `/`Bob Van Landuyt
2017-05-01The dynamic path validator can block out partial pathsBob Van Landuyt
So we can block `objects` only when it is contained in `info/lfs` or `gitlab-lfs`
2017-05-01Make path validation case-insensitiveBob Van Landuyt
2017-05-01Reject `-` as a pathBob Van Landuyt
2017-05-01Rename `NamespaceValidator` to `DynamicPathValidator`Bob Van Landuyt
This reflects better that it validates paths instead of a namespace model
2017-05-01Use the namespace validator for validating all pathsBob Van Landuyt
Since the namespacevalidator now knows the difference between a top-level and another path, this could all be handled there.
2017-05-01Check `has_parent?` for determining validation typeBob Van Landuyt
2017-05-01Split off validating full pathsBob Van Landuyt
The first part of a full path needs to be validated as a `top_level` while the rest need to be validated as `wildcard`
2017-05-01 Improve detection of reserved words from routesBob Van Landuyt
2017-05-01Streamline the path validation in groups & projectsBob Van Landuyt
`Project` uses `ProjectPathValidator` which is now a `NamespaceValidator` that skips the format validation. That way we're sure we are using the same collection of reserved paths. I updated the path constraints to reflect the changes: We now allow some values that are only used on a top level namespace as a name for a nested group/project.
2017-05-01Add forbidden paths to the namespace validatorBob Van Landuyt
2017-05-01Disallow some more namespacesBob Van Landuyt
These routes seem to be taken
2017-04-06Rename cron_time_zone to cron_timezone. Separate add_concurrent_foreign_key.Shinya Maeda
2017-04-06Separate cron_valid? and cron_time_zone_valid?Shinya Maeda
2017-04-06Move Ci::CronParser to Gitlab::Ci::CronParserShinya Maeda
2017-04-06Add Import/Export Setting for trigger_schedule. Remove ref validation.Shinya Maeda
2017-04-06Fix rubocop issues. Use add_concurrent_foreign_key.Shinya Maeda
2017-04-06Add validatorShinya Maeda
2017-03-21Merge branch 'ssrf' into 'security' Douwe Maan
Protect server against SSRF in project import URLs See merge request !2068
2017-03-13Reserve few project and nested group pathsDmitriy Zaporozhets
That have wildcard routes associated and not reserved yet: artifacts, graphs, badges and refs Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2017-03-07Restrict nested group names to prevent ambiguous routesDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2017-02-24Introduce DurationValidator, feedback:Lin Jen-Shin
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/9219#note_24032923
2017-02-23Enable Style/MutableConstantDouwe Maan
2017-02-01Fix certificate validatorsKamil Trzcinski
2017-02-01Implement proper verification of certificate's public_key against the ↵Kamil Trzcinski
private_key
2017-02-01Initial work on GitLab Pages updateKamil Trzcinski
2017-01-06Whitelist next project names: assets, profile, publicDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-12-21Whitelist next project names: notes, servicesDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-12-21Whitelist next project names: help, ci, admin, searchDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-12-21Allow projects with dashboard as pathDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-11-23Add nested groups support to the routingDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-10-11Add `robots.txt` to the list of reserved namespacesNick Thomas
2016-09-29Add '.well-known' to the list of reserved namespacesRobert Speicher
See https://gitlab.com/gitlab-org/gitlab-ce/issues/22759
2016-07-01refactor url validator to use sanitizer for checkJames Lopez
2016-06-30few more changes from suggestionsJames Lopez
2016-06-30few changes based on feedbackJames Lopez
2016-06-24added more info on how addressable URI differs from what we use in UrlValidatorJames Lopez
2016-06-23updated validator based on feedbackJames Lopez
2016-06-20fix commentJames Lopez
2016-06-20fixed a few MySQL issues and added changelogJames Lopez
2016-06-20started working on a migration for projects that have current import_url issuesJames Lopez
2016-06-20fix addressable url validatorJames Lopez
2016-06-17fixing URL validation for import_url on projectsJames Lopez
2016-02-26Allow webhooks URL to have leading and trailing spacesevuez
2016-02-09Re-add EmailValidator to avoid the repetition of format: { with: ↵Rémy Coutable
Devise.email_regexp }
2016-02-09Validate email addresses using Devise.email_regexpRémy Coutable
Also: - Get rid of legacy :strict_mode - Get rid of custom :email validator - Add some shared examples to spec emails validation
2016-01-08Blacklist 'new'Robert Schilling
2015-12-08Inline Gitlab::Blacklist in NamespaceValidatorRobert Speicher