<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/gitlab/gitlab-ce.git/spec/initializers, branch docs/add_file_diff_description</title>
<subtitle>gitlab.com: gitlab-org/gitlab-ce.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/'/>
<entry>
<title>Merge branch 'security-enable-image-proxy' into 'master'</title>
<updated>2019-08-29T21:34:29+00:00</updated>
<author>
<name>GitLab Release Tools Bot</name>
<email>robert+release-tools@gitlab.com</email>
</author>
<published>2019-08-29T21:34:29+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=090956259c47d839b136f9391c3f74255764da81'/>
<id>090956259c47d839b136f9391c3f74255764da81</id>
<content type='text'>
Use image proxy to mitigate stealing ip addresses

Closes #2812

See merge request gitlab/gitlabhq!2926</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Use image proxy to mitigate stealing ip addresses

Closes #2812

See merge request gitlab/gitlabhq!2926</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'security-ssrf-kubernetes-dns-12-3' into 'master'</title>
<updated>2019-08-29T21:33:42+00:00</updated>
<author>
<name>GitLab Release Tools Bot</name>
<email>robert+release-tools@gitlab.com</email>
</author>
<published>2019-08-29T21:33:42+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=15b88fe57faff899b76d24e41985d83612c7de3a'/>
<id>15b88fe57faff899b76d24e41985d83612c7de3a</id>
<content type='text'>
DNS Rebind SSRF in Kubernetes Integration

See merge request gitlab/gitlabhq!3345</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
DNS Rebind SSRF in Kubernetes Integration

See merge request gitlab/gitlabhq!3345</pre>
</div>
</content>
</entry>
<entry>
<title>Add support for using a Camo proxy server</title>
<updated>2019-08-24T04:44:53+00:00</updated>
<author>
<name>Brett Walker</name>
<email>bwalker@gitlab.com</email>
</author>
<published>2019-02-20T23:51:55+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=ad05e488636ebe05b4985dbf3c7d912fd8d56f49'/>
<id>ad05e488636ebe05b4985dbf3c7d912fd8d56f49</id>
<content type='text'>
User images and videos will get proxied through
the Camo server in order to keep malicious
sites from collecting the IP address of users.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
User images and videos will get proxied through
the Camo server in order to keep malicious
sites from collecting the IP address of users.
</pre>
</div>
</content>
</entry>
<entry>
<title>Column was renamed in 12.2</title>
<updated>2019-08-21T02:25:38+00:00</updated>
<author>
<name>Thong Kuah</name>
<email>tkuah@gitlab.com</email>
</author>
<published>2019-08-20T23:59:58+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=d1de6fd4d867ee817a1979e05344e580d33c7759'/>
<id>d1de6fd4d867ee817a1979e05344e580d33c7759</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Override hostname when connecting via Kubeclient</title>
<updated>2019-08-20T22:49:22+00:00</updated>
<author>
<name>Thong Kuah</name>
<email>tkuah@gitlab.com</email>
</author>
<published>2019-07-19T02:12:02+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=e0826b0cb522dc4a112f6617c6fb222f6e3f4ce2'/>
<id>e0826b0cb522dc4a112f6617c6fb222f6e3f4ce2</id>
<content type='text'>
Kubeclient uses rest-client. We hack into to access the net/http object
so that we can patch to connect to the resolved IP + set
hostname_override.

Add specs for discord. The discord integration also uses rest-client, so
since we patched rest-client, spec that the DNS rebinding protection
works
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Kubeclient uses rest-client. We hack into to access the net/http object
so that we can patch to connect to the resolved IP + set
hostname_override.

Add specs for discord. The discord integration also uses rest-client, so
since we patched rest-client, spec that the DNS rebinding protection
works
</pre>
</div>
</content>
</entry>
<entry>
<title>feat: SMIME signed notification emails</title>
<updated>2019-08-20T14:13:32+00:00</updated>
<author>
<name>Diego Louzán</name>
<email>diego.louzan.ext@siemens.com</email>
</author>
<published>2019-07-10T19:40:28+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=0dcb9d21efc1db97765d82ee39a0f0905ba945ba'/>
<id>0dcb9d21efc1db97765d82ee39a0f0905ba945ba</id>
<content type='text'>
- Add mail interceptor the signs outgoing email with SMIME
- Add lib and helpers to work with SMIME data
- New configuration params for setting up SMIME key and cert files
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Add mail interceptor the signs outgoing email with SMIME
- Add lib and helpers to work with SMIME data
- New configuration params for setting up SMIME key and cert files
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove ignored circuit_breaker columns</title>
<updated>2019-06-28T08:30:40+00:00</updated>
<author>
<name>Zeger-Jan van de Weg</name>
<email>git@zjvandeweg.nl</email>
</author>
<published>2019-06-28T08:28:28+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=cb4a514207c914069410a01de8b493076156752a'/>
<id>cb4a514207c914069410a01de8b493076156752a</id>
<content type='text'>
The circuit breaker itself got removed a while ago, when that happened
some parts got left behind. Using grep old stale settings and
validations were found and are now removed.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The circuit breaker itself got removed a while ago, when that happened
some parts got left behind. Using grep old stale settings and
validations were found and are now removed.
</pre>
</div>
</content>
</entry>
<entry>
<title>Store Let's Encrypt private key in settings</title>
<updated>2019-05-28T04:47:34+00:00</updated>
<author>
<name>Vladimir Shushlin</name>
<email>vshushlin@gitlab.com</email>
</author>
<published>2019-05-28T04:47:34+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=4687ff7c9be789341e82a6440234fce43f30b5be'/>
<id>4687ff7c9be789341e82a6440234fce43f30b5be</id>
<content type='text'>
Storing this key in secrets.yml was a bad idea,
it would require users using HA setups to manually
replicate secrets across nodes during update,
it also needed support from omnibus package

* Revert "Generate Let's Encrypt private key"
  This reverts commit 444959bfa0b79e827a2a1a7a314acac19390f976.

* Add Let's Encrypt private key to settings
  as encrypted attribute

* Generate Let's Encrypt private key
  in database migration
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Storing this key in secrets.yml was a bad idea,
it would require users using HA setups to manually
replicate secrets across nodes during update,
it also needed support from omnibus package

* Revert "Generate Let's Encrypt private key"
  This reverts commit 444959bfa0b79e827a2a1a7a314acac19390f976.

* Add Let's Encrypt private key to settings
  as encrypted attribute

* Generate Let's Encrypt private key
  in database migration
</pre>
</div>
</content>
</entry>
<entry>
<title>Generate Let's Encrypt private key</title>
<updated>2019-05-09T13:45:25+00:00</updated>
<author>
<name>Vladimir Shushlin</name>
<email>vshushlin@gitlab.com</email>
</author>
<published>2019-05-09T13:45:25+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=444959bfa0b79e827a2a1a7a314acac19390f976'/>
<id>444959bfa0b79e827a2a1a7a314acac19390f976</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Run rubocop -a on CE files</title>
<updated>2019-05-05T10:24:28+00:00</updated>
<author>
<name>Stan Hu</name>
<email>stanhu@gmail.com</email>
</author>
<published>2019-05-05T10:19:14+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=f93b2e02a56a3b1f3041119e8302d43aeafc8284'/>
<id>f93b2e02a56a3b1f3041119e8302d43aeafc8284</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
