gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2019-01-04	Added Class check to commits helper Spec	Tim Zallmann

2018-09-25	Fix committer typo	George Tsiolis

2017-09-08	Merge branch 'fix-escape-commit-block' into 'security-9-5'	Douwe Maan
	[9.5] Prevent a persistent XSS in the commit author block See merge request gitlab/gitlabhq!2180
2017-08-03	Change all `:empty_project` to `:project`	Robert Speicher

2017-06-21	Enable Style/DotPosition Rubocop :cop:	Grzegorz Bizon

2017-02-07	Address feedback	Douwe Maan

2017-02-07	Add tests	Douwe Maan

2016-04-18	Remove persistent XSS vulnerability in `commit_person_link` helper	Robert Speicher
	Because we were incorrectly supplying the tooltip title as `data-original-title` (which Bootstrap's Tooltip JS automatically applies based on the `title` attribute; we should never be setting it directly), the value was being passed through as-is. Instead, we should be supplying the normal `title` attribute and letting Rails escape the value, which also negates the need for us to call `sanitize` on it. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15126