Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2020-04-28Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-04-13Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-03-31Add latest changes from gitlab-org/gitlab@12-9-stable-eeGitLab Bot
2020-03-26Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-03-25Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-03-24Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-03-24Add latest changes from gitlab-org/security/gitlab@12-9-stable-eeGitLab Bot
2020-03-19Add latest changes from gitlab-org/gitlab@12-9-stable-eeGitLab Bot
2020-03-16Add latest changes from gitlab-org/gitlab@12-8-stable-eeGitLab Bot
2020-03-05Add latest changes from gitlab-org/gitlab@12-8-stable-eeGitLab Bot
2020-02-28Add latest changes from gitlab-org/security/gitlab@12-8-stable-eeGitLab Bot
2020-02-28Add latest changes from gitlab-org/security/gitlab@12-8-stable-eeGitLab Bot
2020-02-24Add latest changes from gitlab-org/gitlab@12-8-stable-eeGitLab Bot
2020-02-20Add latest changes from gitlab-org/gitlab@12-8-stable-eeGitLab Bot
2020-02-13Add latest changes from gitlab-org/security/gitlab@12-7-stable-eeGitLab Bot
2020-02-01Add latest changes from gitlab-org/gitlab@12-7-stable-eeGitLab Bot
2020-01-28Add latest changes from gitlab-org/security/gitlab@12-7-stable-eeGitLab Bot
2020-01-28Add latest changes from gitlab-org/security/gitlab@12-7-stable-eeGitLab Bot
2020-01-28Add latest changes from gitlab-org/security/gitlab@12-7-stable-eeGitLab Bot
2020-01-28Add latest changes from gitlab-org/security/gitlab@12-7-stable-eeGitLab Bot
2020-01-24Add latest changes from gitlab-org/gitlab@12-7-stable-eeGitLab Bot
2020-01-21Add latest changes from gitlab-org/gitlab@12-7-stable-eeGitLab Bot
2020-01-10Add latest changes from gitlab-org/security/gitlab@12-6-stable-eeGitLab Bot
2020-01-09Add latest changes from gitlab-org/gitlab@12-6-stable-eeGitLab Bot
2020-01-04Add latest changes from gitlab-org/gitlab@12-6-stable-eeGitLab Bot
2019-12-31Add latest changes from gitlab-org/security/gitlab@12-6-stable-eeGitLab Bot
2019-12-27Add latest changes from gitlab-org/gitlab@12-6-stable-eeGitLab Bot
2019-12-20Add latest changes from gitlab-org/gitlab@12-6-stable-eeGitLab Bot
2019-12-03Add latest changes from gitlab-org/gitlab@12-5-stable-eeGitLab Bot
2019-11-26Merge branch 'security-dos-issue-and-commit-comments-12-5' into '12-5-stable'GitLab Release Tools Bot
Fix invalid byte sequence See merge request gitlab/gitlabhq!3547
2019-11-26Merge branch 'security-ag-cycle-analytics-guest-permissions-12-5' into ↵GitLab Release Tools Bot
'12-5-stable' Prevent guests from seeing commits for cycle analytics See merge request gitlab/gitlabhq!3534
2019-11-26Merge branch 'security-dns-rebind-ssrf-in-slack-notifications-12-5-ce' into ↵GitLab Release Tools Bot
'12-5-stable' Use Gitlab::HTTP for all chat notifications See merge request gitlab/gitlabhq!3544
2019-11-26Merge branch 'security-fix-xss-in-label-namespace-12-5' into '12-5-stable'GitLab Release Tools Bot
Escape namespace in label references See merge request gitlab/gitlabhq!3550
2019-11-26Merge branch 'security-28802-respect-fork-parent-visibility-12-5' into ↵GitLab Release Tools Bot
'12-5-stable' Check permissions before showing a forked project's source See merge request gitlab/gitlabhq!3555
2019-11-26Ensure attributes that end in `_ids` are cleanedDJ Mountney
This prevents an issue where you can steal other projects objects by asking for ids that don't belong to you in import.
2019-11-25Check permissions before showing a forked project's sourceNick Thomas
2019-11-25Escape namespace in label referencesHeinrich Lee Yu
When referencing cross-namespace labels, we append the namespace name to the rendered label. This MR escapes the name to prevent XSS attacks.
2019-11-22Fix invalid byte sequencePatrick Derichs
2019-11-21Use Gitlab::HTTP for all chat notificationsHordur Freyr Yngvason
2019-11-20Prevent guests from seeing commits for cycle analyticsAakriti Gupta
- if the user has access level lower than REPORTER, don't include commit count in summary
2019-11-20Add latest changes from gitlab-org/gitlab@12-5-stable-eeGitLab Bot
2019-11-04Add latest changes from gitlab-org/gitlab@12-4-stable-eeGitLab Bot
2019-10-24Merge branch 'security-wiki-rdoc-content-12-4-ce' into '12-4-stable'GitLab Release Tools Bot
Pass all wiki markup formats through our Banzai pipeline filters See merge request gitlab/gitlabhq!3485
2019-10-24Merge branch ↵GitLab Release Tools Bot
'security-2914-labels-visible-despite-no-access-to-issues-repositories-12-4' into '12-4-stable' Labels visible despite no access to issues & repositories See merge request gitlab/gitlabhq!3489
2019-10-23Allow tests to ignore recursioncharlieablett
2019-10-23Check for recursion and fail if too recursivecharlieablett
- List all overly-recursive fields - Reduce recursion threshold to 2 - Add test for not-recursive-enough query - Use reusable methods in tests - Add changelog - Set changeable acceptable recursion level - Add error check test helpers
2019-10-23Pass all wiki markup formats through pipelinesLuke Duncalfe
Previously, when the wiki page format was anything other than `markdown` or `asciidoc` the formatted content would be returned though a Gitaly call. Gitaly in turn would delegate formatting to the gitlab-gollum-lib gem, which in turn would delegate that to various gems (like RDoc for `rdoc`) and then apply some very liberal sanitization. It was too liberal! This change brings our wiki content formatting in line with how we format other markdown at GitLab, so we have a SSOT for sanitization. https://gitlab.com/gitlab-org/gitlab/issues/30540
2019-10-22Fix labels finder to filter issuablesEugenia Grieff
Use project scopes to filter project labels that are visible for user
2019-10-22Add latest changes from gitlab-org/gitlab@12-4-stable-eeGitLab Bot
2019-09-26Merge branch 'security-sarcila-verify-saml-request-origin-12-3' into ↵GitLab Release Tools Bot
'12-3-stable' Check that SAML identity linking validates the origin of the request See merge request gitlab/gitlabhq!3396
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-18 00:35:39 +0300