Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-05-26Add latest changes from gitlab-org/security/gitlab@13-0-stable-eeGitLab Bot
2019-05-29Hide password on import by url formIgor Drozdov
2018-12-09Only allow strings in URL::Sanitizer.valid?Stan Hu
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55079
2018-10-22Enable frozen string for lib/gitlab/*.rbgfyoung
2018-09-21Fix UriDefaultParser copSemyon Pupkov
2018-07-19Escape username and password in UrlSanitizer#full_urlStan Hu
If a user uses a password with certain characters (e.g. /, #, +, etc.) UrlSanitizer#full_url will generate an invalid URL that cannot be parsed properly by Addressable::URI. If used with UrlBlocker, this will be flagged as an invalid URI.
2018-07-10Properly handle colons in URL passwordsStan Hu
Before b46d5b13ecb8e0c0793fa433bff7f49cb0612760, we relied on `Addressable::URI` to parse the username/password in a URL, but this failed when credentials contained special characters. However, this introduced a regression where the parsing would incorrectly truncate the password if the password had a colon. Closes #49080
2017-11-16Adds Rubocop rule for line break after guard clauseJacopo
Adds a rubocop rule (with autocorrect) to ensure line break after guard clauses.
2017-10-02Freeze the constant arrayLin Jen-Shin
2017-09-29Just allow the scheme we want!Lin Jen-Shin
2017-09-29Adapt to the latest addressable behaviourLin Jen-Shin
2017-09-28Make sure we didn't blow up if URI is invalidLin Jen-Shin
2017-09-11Backport more EE changes to Gitlab::UrlSanitizerNick Thomas
2017-09-06Remove blank passwords from sanitized URLsNick Thomas
2017-09-06Backport EE fixes to Gitlab::UrlSanitizer to CENick Thomas
2017-05-30Don't allow to pass a user to ProjectWiki#http_url_to_repoRémy Coutable
This partially reverts be25bbc4d2c7e3d5cf3da6f51cb7f7355295ef52. Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-03-20Fix ProjectWiki#http_url_to_repo signatureRémy Coutable
New Gitlab::UrlSanitizer.http_credentials_for_user method responsible for generating a credentials hash from a user. Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-03-10Fix for creating a project through API when import_url is nilToon Claes
The API was returning 500 when `nil` is passed for the `import_url`. In fact, it was `Gitlab::UrlSanitizer.valid?` which was throwing a `NoMethodError` when `nil` value was passed.
2017-02-23Enable Style/WordArrayDouwe Maan
2016-07-11spec and fix for sanitize methodJames Lopez
2016-06-30few more changes from suggestionsJames Lopez
2016-06-30use class methodJames Lopez
2016-06-30few changes based on feedbackJames Lopez
2016-05-23fix changelog and mergeJames Lopez
2016-05-19Mask credentials from URL when import of project has failed.Rubén Dávila