Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-07-19 | Add latest changes from gitlab-org/gitlab@16-2-stable-eev16.2.0-rc42 | GitLab Bot | |
2023-06-20 | Add latest changes from gitlab-org/gitlab@16-1-stable-eev16.1.0-rc42 | GitLab Bot | |
2023-02-20 | Add latest changes from gitlab-org/gitlab@15-9-stable-eev15.9.0-rc42 | GitLab Bot | |
2022-11-17 | Add latest changes from gitlab-org/gitlab@15-6-stable-eev15.6.0-rc42 | GitLab Bot | |
2022-10-20 | Add latest changes from gitlab-org/gitlab@15-5-stable-eev15.5.0-rc42 | GitLab Bot | |
2022-09-20 | Add latest changes from gitlab-org/gitlab@15-4-stable-eev15.4.0-rc42 | GitLab Bot | |
2022-08-18 | Add latest changes from gitlab-org/gitlab@15-3-stable-eev15.3.0-rc42 | GitLab Bot | |
2022-05-19 | Add latest changes from gitlab-org/gitlab@15-0-stable-eev15.0.0-rc42 | GitLab Bot | |
2022-03-18 | Add latest changes from gitlab-org/gitlab@14-9-stable-eev14.9.0-rc42 | GitLab Bot | |
2022-02-18 | Add latest changes from gitlab-org/gitlab@14-8-stable-eev14.8.0-rc42 | GitLab Bot | |
2021-12-20 | Add latest changes from gitlab-org/gitlab@14-6-stable-eev14.6.0-rc42 | GitLab Bot | |
2021-07-20 | Add latest changes from gitlab-org/gitlab@14-1-stable-eev14.1.0-rc42 | GitLab Bot | |
2021-05-31 | Add latest changes from gitlab-org/security/gitlab@13-12-stable-ee | GitLab Bot | |
2021-04-21 | Add latest changes from gitlab-org/gitlab@13-11-stable-eev13.11.0-rc43 | GitLab Bot | |
2021-02-18 | Add latest changes from gitlab-org/gitlab@13-9-stable-eev13.9.0-rc42 | GitLab Bot | |
2021-01-20 | Add latest changes from gitlab-org/gitlab@13-8-stable-eev13.8.0-rc42 | Robert Speicher | |
2020-10-30 | Add latest changes from gitlab-org/security/gitlab@13-5-stable-ee | GitLab Bot | |
2020-08-20 | Add latest changes from gitlab-org/gitlab@13-3-stable-ee | GitLab Bot | |
2020-07-20 | Add latest changes from gitlab-org/gitlab@13-2-stable-ee | GitLab Bot | |
2020-06-18 | Add latest changes from gitlab-org/gitlab@13-1-stable-ee | GitLab Bot | |
2020-05-20 | Add latest changes from gitlab-org/gitlab@13-0-stable-ee | GitLab Bot | |
2020-04-20 | Add latest changes from gitlab-org/gitlab@12-10-stable-ee | GitLab Bot | |
2020-03-05 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-02-27 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-01-08 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-11-01 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-10-23 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-08-22 | Add frozen_string_literal to lib part 2 | Thong Kuah | |
Using the sed script from https://gitlab.com/gitlab-org/gitlab-ce/issues/59758 | |||
2019-07-24 | [ADD] outbound requests whitelist | Reuben Pereira | |
Signed-off-by: Istvan szalai <istvan.szalai@savoirfairelinux.com> | |||
2019-03-12 | Backport try_megabytes_to_bytes from EE | Yorick Peterse | |
EE adds this method to Gitlab::Utils, which is also required by our SimpleCov helper. This prevents us from injecting EE modules into Gitlab::Utils, because the necessary bits for this are not yet in place. To work around this we just backport try_megabytes_to_bytes, as there's no particular reason to keep this in EE only. | |||
2019-01-04 | Add config_options|variables to BuildMetadata | Kamil Trzciński | |
These are data columns that store runtime configuration of build needed to execute it on runner and within pipeline. The definition of this data is that once used, and when no longer needed (due to retry capability) they can be freely removed. They use `jsonb` on PostgreSQL, and `text` on MySQL (due to lacking support for json datatype on old enough version). | |||
2018-12-10 | Fix a frozen string error in lib/gitlab/utils.rb | Rémy Coutable | |
Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2018-12-06 | Merge branch '54857-fix-templates-path-traversal' into 'master' | Cindy Pallares | |
[master]: Prevent a path traversal attack on global file templates Closes #2745 See merge request gitlab/gitlabhq!2677 | |||
2018-12-05 | Prevent a path traversal attack on global file templates | Nick Thomas | |
The API permits path traversal characters like '../' to be passed down to the template finder. Detect these requests and cause them to fail with a 500 response code. | |||
2018-11-28 | Pad encryption keys with UTF-8 0 instead of \0 char | Grzegorz Bizon | |
2018-11-23 | Fix static analysis in utf8 helper methods | Grzegorz Bizon | |
2018-11-22 | Ensure that db encryption keys have proper bytesize | Grzegorz Bizon | |
2018-11-07 | Add a helper method to append path to a base URL | Douglas Barbosa Alexandre | |
In Ruby 2.4, `URI.join("http://test//", "a").to_s` will remove the double slash, however it's not the case in Ruby 2.5. Using chomp should work better for the intention, as we're not trying to allow things like ../ or / paths resolution. This helper method append path to host, making sure there's one single slash as path separator. | |||
2018-04-12 | Backport of EE !4989 | Rubén Dávila | |
2018-03-07 | Gitlab::Utils - backport `.ensure_array_from_string` from EE | Mario de la Ossa | |
2018-01-17 | Merge branch ↵ | Robert Speicher | |
'41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3' Don't allow line breaks on HTTP headers See merge request gitlab/gitlabhq!2277 (cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82) 073b8f9c Don't allow line breaks on HTTP headers | |||
2017-12-02 | Backport `which` from EE | Michael Kozono | |
2017-08-31 | Add a linter for PO files | Bob Van Landuyt | |
2017-08-15 | Fix CI_PROJECT_PATH_SLUG slugify | vanadium23 | |
2017-07-27 | Remove superfluous lib: true, type: redis, service: true, models: true, ↵ | Rémy Coutable | |
services: true, no_db: true, api: true Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2017-05-25 | Fix tests and rubocop offense | Lin Jen-Shin | |
2017-05-25 | Frontend implementation, tests, and changelog | Lin Jen-Shin | |
2017-02-23 | Enable Rails/Delegate | Douwe Maan | |
2016-11-01 | Fix project features default values | Felipe Artur | |