| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|\
| |
| |
| |
| | |
Further simplify app/views/projects/buttons/_dropdown.html.haml
See merge request gitlab-org/gitlab-ce!16503
|
| | |
|
|\ \
| | |
| | |
| | |
| | | |
Backport 10.3.4 security fixes into master
See merge request gitlab-org/gitlab-ce!16509
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | |
| | |
| | |
| | | |
[ci skip]
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
[10.3] Prevent login with disabled OAuth providers
See merge request gitlab/gitlabhq!2296
(cherry picked from commit 4936650427ffc88e6ee927aedbb2c724d24b094c)
a0f9d222 Prevents login with disabled OAuth providers
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Port of [10.2] Sanitizes IPython notebook output
See merge request gitlab/gitlabhq!2285
(cherry picked from commit 1c46e031c70706450a8e0ae730f4c323b72f9e4c)
aac035fe Port of [10.2] Sanitizes IPython notebook output
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
[10.3] Fix RCE via project import mechanism
See merge request gitlab/gitlabhq!2294
(cherry picked from commit dcfec507d6f9ee119d65a832393e7c593af1d3b2)
86d75812 Fix RCE via project import mechanism
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
'41293-fix-command-injection-vulnerability-on-system_hook_push-queue-through-web-hook' into 'security-10-3'
Don't allow line breaks on HTTP headers
See merge request gitlab/gitlabhq!2277
(cherry picked from commit 7fc0a6fc096768a5604d6dd24d7d952e53300c82)
073b8f9c Don't allow line breaks on HTTP headers
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
'security-10-3'
[10.3] Migrate `can_push` column from `keys` to `deploy_keys_project`
See merge request gitlab/gitlabhq!2276
(cherry picked from commit f6ca52d31bac350a23938e0aebf717c767b4710c)
1f2bd3c0 Backport to 10.3
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
check project access on MR create
See merge request gitlab/gitlabhq!2273
(cherry picked from commit 1fe2325d6ef2bced4c5e97b57691c894f38b2834)
43e85f49 check project access on MR create
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
[10.3] Fix path traversal in gitlab-ci.yml cache:key
See merge request gitlab/gitlabhq!2270
(cherry picked from commit c32d0c6807dfd41d7838a35742e6d0986871b389)
df29094a Fix path traversal in gitlab-ci.yml cache:key
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Validate project path in Gitlab import - 10.3 port
See merge request gitlab/gitlabhq!2268
(cherry picked from commit 94c82376d66fc80d46dd2d5eeb5bade408ec6a7e)
2b94a7c2 Validate project path in Gitlab import
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Remove order param from the MilestoneFinder
See merge request gitlab/gitlabhq!2259
(cherry picked from commit 14408042e78f2ebc2644f956621b461dbfa3d36d)
155881e7 Remove order param from the MilestoneFinder
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
[10.3] Fix XSS in issue label dropdown
See merge request gitlab/gitlabhq!2253
(cherry picked from commit 363ffabcebd7bb0d1a2d59ca1a75e4eadb4a4360)
ea1fb0ea Fix XSS in issue label dropdown
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
[10.3] Fix XSS vulnerability in Pipeline job trace
See merge request gitlab/gitlabhq!2258
(cherry picked from commit 44caa80ed9a2514a74a5eeab10ff51849d64851b)
5f86f3ff Fix XSS vulnerability in Pipeline job trace
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
'security-10-3-do-not-expose-passwords-or-tokens-in-service-integrations-api' into 'security-10-3'
Filter out sensitive fields from the project services API
See merge request gitlab/gitlabhq!2281
(cherry picked from commit 476f2576444632f2a9a61b4cead9c1077f2c81d7)
2bcbbda0 Filter out sensitive fields from the project services API
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Open visibility help in new tab
Closes #39591
See merge request gitlab-org/gitlab-ce!16268
|
|/ / / |
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Resolve "Closed issue label in todo's styling is difficult to read"
Closes #41874
See merge request gitlab-org/gitlab-ce!16414
|
|/ / / |
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
'master'
Resolve "Allow toggling of performance bar in development"
Closes #42006
See merge request gitlab-org/gitlab-ce!16495
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The performance bar is still displayed by default in development.
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|\ \ \ \
| |/ / /
|/| | |
| | | |
| | | | |
Revert "Merge branch 'pre-commit-prettier' into 'master'"
See merge request gitlab-org/gitlab-ce!16217
|
| | | |
| | | |
| | | | |
This reverts merge request !16061
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Fast blank can speed things up. Spotify uses it as well…
See merge request gitlab-org/gitlab-ce!16468
|
| | |_|/
| |/| |
| | | |
| | | | |
See https://github.com/rails/rails/pull/24658#issuecomment-212651965
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Add view elements to deploy keys pages
See merge request gitlab-org/gitlab-ce!16464
|
| | | | | |
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Resolve "Projects dropdown width and height shrinked, causes scrollbars wrapping around"
Closes #42035
See merge request gitlab-org/gitlab-ce!16507
|
| | |/ / /
| |/| | | |
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Resolve "Enable ordering and sorting for the Deployments API"
Closes #41118
See merge request gitlab-org/gitlab-ce!16396
|
| | |_|_|/
| |/| | |
| | | | |
| | | | |
| | | | | |
Adds sorting to deployments API through the `order_by` and sort
`fields`.
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
into 'master'
Fix JS bundle not running on the Cluster update/destroy pages -- CE backport
Closes gitlab-ee#4378
See merge request gitlab-org/gitlab-ce!16506
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fix https://gitlab.com/gitlab-org/gitlab-ee/issues/4378
Conflicts:
app/assets/javascripts/dispatcher.js
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Remove unused methods from Gitlab::Git
See merge request gitlab-org/gitlab-ce!16494
|
|/ / / / / |
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Improved performance of merge requests target branch dropdown
See merge request gitlab-org/gitlab-ce!16428
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | | |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
target branch select dropdown doesnt care about tags so we dont need to waste time searching them
|
| | | | | | |
|