Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-08-21Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-21Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-07Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-08-07Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-29Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-29Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-22Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-17Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-12Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-10Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-09Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-03Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-02Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-07-02Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-26Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-22Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-22Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-18Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-15Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-06-04Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-05-28Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-05-27Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-05-19Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-05-15Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-05-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-04-21Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-04-01Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-31Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-30Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-26Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-03-05Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-02-28Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-29Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-21Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-20Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-07Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-10Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-12-03Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-08Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-07Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-29Merge branch 'security-remove-leaky-401-responses-master' into 'master'GitLab Release Tools Bot
Private/internal repository enumeration via bruteforce on a vulnerable URL See merge request gitlab/gitlabhq!3454
2019-10-18Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-09Avoid #authenticate_user! in #route_not_foundKerri Miller
This method, #route_not_found, is executed as the final fallback for unrecognized routes (as the name might imply.) We want to avoid `#authenticate_user!` when calling `#route_not_found`; `#authenticate_user!` can, depending on the request format, return a 401 instead of redirecting to a login page. This opens a subtle security exploit where anonymous users will receive a 401 response when attempting to access a private repo, while a recognized user will receive a 404, exposing the existence of the private, hidden repo.