delta/gitlab/gitlab-ce.git/app/controllers/oauth, branch 51470-webide-default-commit

Merge branch 'security-fix-uri-xss-applications' into 'master'

2018-11-29T00:14:15+00:00

[master] Resolve "Reflected XSS in OAuth Authorize window due to redirect_uri allowing arbitrary protocols"

See merge request gitlab/gitlabhq!2572

Fix typos in comments and specs

2018-11-01T06:59:20+00:00

Enable more frozen string in app/controllers/

2018-09-23T19:48:02+00:00

Enables frozen string for the following:

* app/controllers/dashboard/**/*.rb
* app/controllers/explore/**/*.rb
* app/controllers/google_api/**/*.rb
* app/controllers/groups/**/*.rb
* app/controllers/import/**/*.rb
* app/controllers/instance_statistics/**/*.rb
* app/controllers/ldap/**/*.rb
* app/controllers/oauth/**/*.rb
* app/controllers/profiles/**/*.rb

Partially addresses #47424.

Always allow user to revoke an authorized application

2018-09-20T11:02:59+00:00

Even if User OAuth applications setting is disabled in admin settings.

Signed-off-by: Dmitriy Zaporozhets

Port `read_cross_project` ability from EE

2018-02-22T16:11:36+00:00

use Gitlab::UserSettings directly as a singleton instead of including/extending it

2018-02-02T18:39:55+00:00

refactor code

2017-10-31T08:03:59+00:00

fix spinach failure

2017-10-31T08:03:59+00:00

add applications controller logic

2017-10-31T08:03:59+00:00

refactor some controllers to make them EE friendly

2017-09-28T06:46:39+00:00