delta/gitlab/gitlab-ce.git/app/models/hooks, branch bootstrap-markdown-code-highlight

Add validation to webhook and service URLs to ensure they are not blocked because of SSRF

2018-06-01T11:43:53+00:00

Merge branch 'jej/mattermost-notification-confidentiality-10-6' into 'security-10-6'

2018-04-05T06:41:56+00:00

[10.6] Prevent notes on confidential issues from being sent to chat

See merge request gitlab/gitlabhq!2366
# Conflicts:
#	app/helpers/services_helper.rb

Merge branch 'feature/merge-request-system-hook' into 'master'

2018-01-18T11:37:16+00:00

System hooks for Merge Requests

See merge request gitlab-org/gitlab-ce!14387

no need for a named parameter

2018-01-17T08:55:00+00:00

extract concern for hook triggers

2018-01-17T08:55:00+00:00

Merge branch '41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'

2018-01-17T01:04:51+00:00

Don't allow line breaks on HTTP headers

See merge request gitlab/gitlabhq!2277

(cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82)

073b8f9c Don't allow line breaks on HTTP headers

execute system hooks from project

2018-01-04T08:33:41+00:00

Wrong data type when testing webhooks

2017-07-20T15:12:06+00:00

Rename ActiverecordSerialize cop

2017-07-06T10:01:36+00:00

This cop has been renamed to ActiveRecordSerialize to match the way
"ActiveRecord" is usually written.

Added Cop to blacklist the use of `dependent:`

2017-07-06T10:01:36+00:00

This is allowed for existing instances so we don't end up 76 offenses
right away, but for new code one should _only_ use this if they _have_
to remove non database data. Even then it's usually better to do this in
a service class as this gives you more control over how to remove the
data (e.g. in bulk).