Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/spec
AgeCommit message (Collapse)Author
2017-04-06Merge branch 'open-redirect-host-fix' into 'security' Sean McGivern
Fix for three open redirect vulns using redirect_to url_for(params.merge))) See merge request !2082
2017-04-06Fix bug with conflict resolution for security release for the events_helper specDJ Mountney
Previously accidently added a test for a feature that does not exist in this release : preserved styles in labels
2017-04-06Merge branch 'open-redirect-fix-continue-to' into 'security'Sean McGivern
Fix for open redirect vuln involving continue[to] params See merge request !2083
2017-04-06Merge branch 'path-disclosure-proj-import-export' into 'security' DJ Mountney
Fix for path disclosure in project import/export See merge request !2080
2017-04-06Merge branch '29364-private-projects-mr-fix' into 'security'Sean McGivern
Don’t show source project name when user does not have access See merge request !2081
2017-04-06Merge branch '30125-markdown-security' into 'security'Robert Speicher
Remove class from SanitizationFilter whitelist See merge request !2079
2017-03-18Merge branch 'render-json-leak' into 'security'DJ Mountney
fix for render json include leaks See merge request !2074 Conflicts: app/controllers/projects/merge_requests_controller.rb spec/controllers/projects/issues_controller_spec.rb
2017-03-18Merge branch 'ssrf' into 'security' Douwe Maan
Protect server against SSRF in project import URLs See merge request !2068
2017-03-18Merge branch '28058-hide-emails-in-atom-feeds' into 'security' Rémy Coutable
Only show public emails in atom feeds See merge request !2066
2017-02-24Fix CompareService signatureSean McGivern
In 8.17+, this takes two arguments to `new`, and two for `execute`. In 8.16, it takes four to `execute`.
2017-02-24Revert "Merge branch '28357-colon-search' into 'master' "James Lopez
This reverts commit f948c2f4ec03c544a1453714189599d02bcd99e8.
2017-02-24Merge branch 'fix-mr-size-with-over-100-files' into 'master' Sean McGivern
Fix MR changes tab size count Closes #27563 See merge request !9091
2017-02-24Merge branch '28357-colon-search' into 'master' Clement Ho
Allow searching issues for strings containing colons Closes #28357 See merge request !9400
2017-02-17Merge branch '28124-mrs-don-t-show-all-merge-errors' into 'master'Rémy Coutable
Show merge errors in merge request widget Closes #28124 and gitlab-ee#1652 See merge request !9229 Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-02-16Change toBe to toBeLessThan to account for flakey timers, spec needs ↵Luke "Jared" Bennett
refactoring a little so this is not a complete fix
2017-02-15Fix spec failures in spec/javascripts/search_autocomplete_spec.jsRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-02-15Merge branch 'dont-delete-assigned-issuables' into 'master' Douwe Maan
Don't delete assigned MRs/issues when user is deleted See merge request !8634
2017-02-15Merge branch '24462-reduce_ldap_queries_for_lfs' into 'master' Robert Speicher
Reduce hits to LDAP on Git HTTP auth by reordering auth mechanisms Closes #24462 See merge request !8752
2017-02-15Merge branch '27343-autocomplete-post-to-wrong-url-when-not-hosting-in-root' ↵Filipa Lacerda
into 'master' Fix filtered search user autocomplete for gitlab instances that are hosted on a subdirectory Closes #27343 See merge request !8891 Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-02-15Merge branch 'api-fix-files' into 'master' Rémy Coutable
API: Fix file downloading See merge request !8953
2017-02-15Merge branch 'fix-anchor-scrolling' into 'master' Clement Ho
Fix broken anchor links when special characters are used Closes #26778 See merge request !8961
2017-02-15Merge branch '27756-fix-json-404-response' into 'master' Clement Ho
Fixes ajax requests when current URL has a trailing slash Closes #27756 See merge request !9010
2017-02-15Merge branch '27480_deploy_keys_should_not_show_up_in_users_keys_list' into ↵Douwe Maan
'master' Make deploy key not show in User's keys list Closes #27480 See merge request !9024
2017-02-15Merge branch 'refresh-permissions-when-moving-projects' into 'master' Rémy Coutable
Refresh authorizations when transferring projects See merge request !9029
2017-02-14Merge branch 'svg-xss-fix' into 'security' Robert Speicher
Fix for XSS vulnerability in SVG attachments See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2059
2017-02-14Merge branch 'fix-rdoc-xss' into 'security' Robert Speicher
Fix XSS in rdoc and other markups See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2058
2017-02-14Merge branch 'asciidoctor-xss-patch' into 'security' Robert Speicher
Add sanitization filter to asciidocs output to prevent XSS See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2057
2017-02-02Use `add_$role` helper in snippets specssnippet-spam-stableSean McGivern
2017-02-02Check public snippets for spamSean McGivern
Apply the same spam checks to public snippets (either personal snippets that are public, or public snippets on public projects) as to issues on public projects.
2017-02-02Merge branch ↵Filipa Lacerda
'27067-mention-user-dropdown-does-not-suggest-by-non-ascii-characters-in-name' into 'master' Resolve "Mention @user dropdown does not suggest by non-ASCII characters in name" Closes #27067 See merge request !8729
2017-02-02Merge branch 'fix-broken-buil-9724713' into 'master' Fatih Acet
Fixes broken build: Use jquery to get the element position in the page See merge request !8926
2017-02-02Merge branch 'fix-filtering-username-with-multiple-words' into 'master' Filipa Lacerda
Fix filtering usernames with multiple words Closes #27404 See merge request !8851
2017-02-02Merge branch '27089-26860-27151-fix-discussion-note-permalink-collapsed' ↵Filipa Lacerda
into 'master' Fix permalink discussion note being collapsed Closes #26860, #27089, and #27151 See merge request !8773
2017-02-02Merge branch 'fix/import-user-validation-error' into 'master' Rémy Coutable
Fix user validation error in Import/Export Closes #23833 See merge request !8909
2017-01-31Merge branch 'rs-issue-27350' into 'master'Rémy Coutable
Fix a transient failure in the `Explore::ProjectsController` spec Closes #27350 See merge request !8847
2017-01-31Merge branch ↵Filipa Lacerda
'27248-filtered-search-does-not-allow-filtering-labels-with-multiple-words' into 'master' Fix filtering label and milestone with multiple words Closes #27248 and #27334 See merge request !8830
2017-01-31Merge branch '27259-label-for-references-the-wrong-associated-text-input' ↵Annabel Dunstone Gray
into 'master' Fix project name label's for reference in project settings Closes #27259 See merge request !8795
2017-01-31Merge branch 'fix-search-bar-search-param' into 'master' Filipa Lacerda
Fix search bar search param encoding Closes #27398 See merge request !8753
2017-01-27Merge branch 'sh-fix-annotated-tags-pointing-to-blob' into 'master' Douwe Maan
Fix Error 500 when repositories contain annotated tags pointing to blobs Closes #27228 See merge request !8800
2017-01-27Merge branch '27044-fix-explore-sorting-on-trending' into 'master' Fatih Acet
Fix /explore sorting (trending) Closes #27044 See merge request !8792
2017-01-27Merge branch 'revert-filter-assigned-to-me' into 'master' Filipa Lacerda
Revert filter-assigned-to-me Closes #27176 See merge request !8785
2017-01-27Merge branch 'fix/26518' into 'master' Douwe Maan
Fix access to the wiki code via HTTP when repository feature disabled Closes #26518 See merge request !8758
2017-01-27Merge branch ↵Fatih Acet
'27124-search-bar-does-not-load-discussion-notes-selected-labels' into 'master' Fix filtered search so that labels selected from discussion notes display correctly Closes #27124 See merge request !8756
2017-01-27Merge branch '26844-new-search-bar-performs-a-new-request-for-each-tag' into ↵Alfredo Sumaran
'master' Add caching of droplab ajax requests Closes #26844 See merge request !8725
2017-01-27Merge branch 'refresh-authorizations-fork-join' into 'master' Douwe Maan
Fix race conditions for AuthorizedProjectsWorker Closes #26194 and #26310 See merge request !8701
2017-01-27Merge branch '26775-fix-auto-complete-initial-loading' into 'master' Fatih Acet
Fix autocomplete initial undefined state (loading) Closes #26775 See merge request !8667
2017-01-27Merge branch 'label-select-toggle' into 'master' Fatih Acet
Fixed label select toggle not updating correctly Closes #26119 See merge request !8601
2017-01-25Merge branch '8-16-stable' of gitlab.com:gitlab-org/gitlab-ce into 8-16-stableJames Lopez
2017-01-25Merge branch 'fix-ci-requests-concurrency' into 'master' Grzegorz Bizon
Fix CI requests concurrency See merge request !8760
2017-01-25Merge branch 'backport-ee-changes-for-build-minutes' into 'master' Grzegorz Bizon
Backport changes introduced by https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/1078 See merge request !8657