Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-06-11Avoid checking the user format in every url validationFrancisco Javier López
2018-06-01Add validation to webhook and service URLs to ensure they are not blocked ↵Francisco Javier López
because of SSRF
2018-03-05Projects and groups badges APIFrancisco Javier López
2018-02-14Add more information in variable_duplicates validator error messageMatija Čupić
2018-02-13Add specs for VariableDuplicates validatorMatija Čupić
2018-02-06Validate User username only on Namespace, and bubble up appropriatelyDouwe Maan
2017-11-06Reallow project paths ending in periodsDouwe Maan
2017-08-03Change all `:empty_project` to `:project`Robert Speicher
2017-08-01Ensure all project factories use `:repository` trait or `:empty_project`Robert Speicher
2017-06-21Rebuild the dynamic path before validating itBob Van Landuyt
Otherwise we won't validate updates to the path. Allowing users to change the path to something that's not allowed.
2017-05-30Avoid crash when trying to parse string with invalid UTF-8 sequenceBob Van Landuyt
2017-05-24Revert "Remove changes that are not absolutely necessary"Douwe Maan
This reverts commit b0498c176fa134761d899c9b369be12f1ca789c5
2017-05-24Remove changes that are not absolutely necessaryDouwe Maan
2017-05-24Fix ambiguous routing issues by teaching router about reserved wordsDouwe Maan
2017-05-02Add a better error message when a certain path is missingBob Van Landuyt
2017-05-02Update path validation & specsBob Van Landuyt
2017-05-02Reuse Gitlab::Regex.full_namespace_regex in the DynamicPathValidatorBob Van Landuyt
2017-05-01Reject group-routes as names of child namespacesBob Van Landuyt
2017-05-01Reject paths following namespace for paths including 2 `*`Bob Van Landuyt
Reject the part following `/*namespace_id/:project_id` for paths containing 2 wildcard parameters
2017-05-01Use `%r{}` regexes to avoid having to escape `/`Bob Van Landuyt
2017-05-01The dynamic path validator can block out partial pathsBob Van Landuyt
So we can block `objects` only when it is contained in `info/lfs` or `gitlab-lfs`
2017-05-01Make path validation case-insensitiveBob Van Landuyt
2017-05-01Rename `NamespaceValidator` to `DynamicPathValidator`Bob Van Landuyt
This reflects better that it validates paths instead of a namespace model
2017-05-01Split off validating full pathsBob Van Landuyt
The first part of a full path needs to be validated as a `top_level` while the rest need to be validated as `wildcard`
2017-05-01 Improve detection of reserved words from routesBob Van Landuyt
2017-05-01Streamline the path validation in groups & projectsBob Van Landuyt
`Project` uses `ProjectPathValidator` which is now a `NamespaceValidator` that skips the format validation. That way we're sure we are using the same collection of reserved paths. I updated the path constraints to reflect the changes: We now allow some values that are only used on a top level namespace as a name for a nested group/project.
2017-05-01Add forbidden paths to the namespace validatorBob Van Landuyt