Age | Commit message (Collapse) | Author |
|
Upon inspection of logs, there were a number of fields not filtered. For example:
* authenticity_token: CSRF token
* rss_token: Used for RSS feeds
* secret: Used with Projects::UploadController
Rails provides a way to match regexps, so we now filter:
* Any parameter ending with `_token`
* Any parameter containing `password`
* Any parameter containing `secret`
|
|
|
|
Group milestones can only be referred to by name, not IID. They also do not
support cross-project references.
|
|
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/2483
|
|
|
|
Add creation time filters to user search API for admins
Closes #29507
See merge request !12682
|
|
|
|
|
|
Fix shorter route helpers in production environment
Closes #34741
See merge request !12675
|
|
|
|
I don't know exactly when Rails picks each module to use, but this seems to be
used by `app` in the console (for instance, `app.project_path` would fail
before, but works now).
|
|
|
|
|
|
Start of the new navigation by redesigning just the top navigation menu.
This is only shown when a cookie is set.
Part of #32794
|
|
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|
|
|
these in _head when testing
|
|
CI/CD models are already located inside `CI` module, thus usual Rails
autoloading principles apply.
See https://github.com/rails/rails/issues/28854 for more details.
|
|
It isn't working fine when using POROs in forms like WikiPage,
the following error is being raised: undefined method `abstract_class?' for Object:Class
|
|
|
|
|
|
|
|
|
|
- gl_emoji for falling back to image/css-sprite when the browser
doesn't support an emoji
- Markdown rendering (Banzai filter)
- Autocomplete
- Award emoji menu
- Perceived perf
- Immediate response because we now build client-side
- Update `digests.json` generation in gemojione rake task to be more
useful and include `unicodeVersion`
MR: !9437
See issues
- #26371
- #27250
- #22474
|
|
Refactor network graph bundle to ES module syntax
See merge request !9696
|
|
review
- cleanup formating in haml
- clarify time window is in seconds
- cleanup straneous chunks in db/schema
- rename count_uniqe_ips to update_and_return_ips_count
- other
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
world test
Add the following line to GDK Procfile to play with it:
webpack: exec support/exec-cd gitlab npm run dev-server
|
|
|
|
|
|
|
|
|
|
Filter `incoming_email_token` and `runners_token` parameters
Closes https://dev.gitlab.org/gitlab/gitlabhq/issues/2676
See merge request !2045
|
|
Render math in Asciidoc and Markdown with KaTeX using code blocks
Closes #13690 and #13180
See merge request !8003
|
|
|
|
Add authentication_token to filter_parameters list
See merge request !2041
|
|
|
|
This prevents VueJS being included in application.js & therefore included on everypage
|
|
Dumping too many jobs in the same queue (e.g. the "default" queue) is a
dangerous setup. Jobs that take a long time to process can effectively
block any other work from being performed given there are enough of
these jobs.
Furthermore it becomes harder to monitor the jobs as a single queue
could contain jobs for different workers. In such a setup the only
reliable way of getting counts per job is to iterate over all jobs in a
queue, which is a rather time consuming process.
By using separate queues for various workers we have better control over
throughput, we can add weight to queues, and we can monitor queues
better. Some workers still use the same queue whenever their work is
related. For example, the various CI pipeline workers use the same
"pipeline" queue.
This commit includes a Rails migration that moves Sidekiq jobs from the
old queues to the new ones. This migration also takes care of doing the
inverse if ever needed. This does require downtime as otherwise new jobs
could be scheduled in the old queues after this migration completes.
This commit also includes an RSpec test that blacklists the use of the
"default" queue and ensures cron workers use the "cronjob" queue.
Fixes gitlab-org/gitlab-ce#23370
|
|
|
|
- Use a store base object to manage application state.
- Add a service to handle ajax requests.
- Load code only when needed
|
|
Signed-off-by: Rémy Coutable <remy@rymai.me>
|