Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-12-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-08-27Use `stub_full_request` to fix spec failureHeinrich Lee Yu
Also change test URL sequest to .test TLD
2019-08-02Refactor SystemHookUrlValidator and specsGeorge Koltsov
Simplify SystemHookUrlValidator to inherit from PublicUrlValidator Refactor specs to move out shared examples to be used in both system hooks and public url validators.
2019-08-02Update security/webhooks.md doc page & specsGeorge Koltsov
Updating security/webhooks.md to match new behaviour as well as drying up few specs to extract shared examples
2019-08-02Add outbound requests setting for system hooksGeorge Koltsov
This MR adds new application setting to network section `allow_local_requests_from_system_hooks`. Prior to this change system hooks were allowed to do local network requests by default and we are adding an ability for admins to control it.
2019-05-30Protect Gitlab::HTTP against DNS rebinding attackDouwe Maan
Gitlab::HTTP now resolves the hostname only once, verifies the IP is not blocked, and then uses the same IP to perform the actual request, while passing the original hostname in the `Host` header and SSL SNI field.
2019-04-12Add frozen_string_literal to spec/servicesThong Kuah
Probably useful as we often move these files to "new" files.
2019-02-17Fix WebHookService spec failing in Ruby 2.6Stan Hu
Ruby 2.6 changed Net::ReadTimeout#message to include the reason for the socket error (https://bugs.ruby-lang.org/issues/14832). However, WebHookService was failing in Ruby 2.6 because it expected Exception#message to match Exception#to_s, which isn't always the case. Fix this by just checking Exception#to_s.
2019-01-24Enable the Layout/ExtraSpacing copRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2018-10-19Catch `RedirectionTooDeep` Exception in webhooksHeinrich Lee Yu
2018-06-25Resolve "WebHookService doesn't handle user info with nil passwords"Jan Beckmann
2018-05-04Ensure web hook 'blocked URL' errors are stored in as web hook logs and ↵Douwe Maan
properly surfaced to the user
2018-03-21Merge branch 'fj-15329-services-callbacks-ssrf' into 'security-10-6'Douwe Maan
Server Side Request Forgery in Services and Web Hooks See merge request gitlab/gitlabhq!2337
2017-12-05Consistently schedule Sidekiq jobsDouwe Maan
2017-09-07Fix a wrong `X-Gitlab-Event` header when testing webhooksRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-08-15Enable Layout/TrailingWhitespace cop and auto-correct offensesRobert Speicher
2017-08-11Enable the RSpec/HookArgument cop and auto-correct offensesRobert Speicher
2017-08-03Change all `:empty_project` to `:project`Robert Speicher
2017-08-01Fix encoding error for WebHook loggingAlexander Randa
2017-07-28Merge branch 'log_webhook_timeout' into 'master'Rémy Coutable
Log web hook execution timeout events See merge request !13134
2017-07-27Log web hook execution timeout eventsAlex Lossent
If a web hook HTTP request is sent but no response comes within a certain time (10s by default), the hook execution fails and will be retried. This commit makes such timeouts visible in the web hook log, like connection timeouts already are. Also log "no route to host" errors.
2017-07-27Use described_class when possibleRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-07-27Remove superfluous lib: true, type: redis, service: true, models: true, ↵Rémy Coutable
services: true, no_db: true, api: true Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-07-20Wrong data type when testing webhooksAlexander Randa
2017-05-25Implement web hooks loggingAlexander Randa
* implemented logging of project and system web hooks * implemented UI for user area (project hooks) * implemented UI for admin area (system hooks) * implemented retry of logged webhook * NOT imeplemented log remover