summaryrefslogtreecommitdiff
path: root/app/models
Commit message (Expand)AuthorAgeFilesLines
* Display only informaton visible to current userJarka Košanová2019-02-271-0/+12
* Display the correct number of MRs a user has access toIgor Drozdov2019-02-272-11/+18
* Merge branch 'security-2818_filter_impersonated_sessions-11-6' into '11-6-sta...Yorick Peterse2019-02-271-2/+4
|\
| * Filter active sessions belonging to an admin impersonating the userImre Farkas2019-02-271-2/+4
* | Merge branch '11-6-security-2773-milestones-fix' into '11-6-stable'Yorick Peterse2019-02-272-4/+14
|\ \
| * | Check issue milestone availabilityJarka Košanová2019-02-132-4/+14
| |/
* | Merge branch '11-6-security-2797-milestone-mrs' into '11-6-stable'Yorick Peterse2019-02-274-2/+20
|\ \
| * | Show only MRs visible to user on milestone detailJarka Košanová2019-02-194-2/+20
| |/
* | Check validity of prometheus_service before queryReuben Pereira2019-02-271-1/+5
* | Arbitrary file read via MergeRequestDiffFrancisco Javier López2019-02-272-1/+3
* | Do not allow local urls in Kubernetes formThong Kuah2019-02-211-1/+1
|/
* Merge branch 'security-project-move-users-11-6' into 'security-11-6'Yorick Peterse2019-01-252-0/+21
* Merge branch 'security-11-6-2769-idn-homograph-attack' into '11-6-stable'Yorick Peterse2019-01-241-1/+1
|\
| * Show tooltip for malicious looking linksBrett Walker2019-01-211-1/+1
* | Merge branch 'security-pipeline-trigger-tokens-exposure-11-6' into 'security-...Yorick Peterse2019-01-241-1/+2
* | Merge branch 'security-fix-regex-dos-11-6' into 'security-11-6'Yorick Peterse2019-01-241-0/+1
* | Merge branch 'security-11-6-test-permissions' into 'security-11-6'Yorick Peterse2019-01-242-1/+12
* | Merge branch 'security-guests-can-see-list-of-merge-requests-11-6' into 'secu...Yorick Peterse2019-01-243-11/+38
* | Merge branch 'security-fix-lfs-import-project-ssrf-forgery-11-6' into 'securi...Yorick Peterse2019-01-241-0/+22
|/
* Merge branch '55103-hide-group-cluster-features' into 'master'Kushal Pandya2019-01-021-1/+4
* Merge branch '55551-nomethoderror-undefined-method-for-nil-nilclass' into 'ma...Kamil Trzciński2019-01-021-1/+1
* Merge branch 'osw-revert-suggestions-ff' into 'master'Douwe Maan2019-01-022-8/+1
* Merge branch 'security-11-6' of dev.gitlab.org:gitlab/gitlabhq into 11-6-stableJohn Jarvis2018-12-274-0/+13
|\
| * Merge branch 'security-fix/security-group-user-removal-11-6' into 'security-1...John Jarvis2018-12-273-0/+7
| |\
| | * Merge branch 'security-11-6' into 'security-fix/security-group-user-removal-1...James Lopez2018-12-277-19/+66
| | |\
| | * | Add subresources removal to member destroy serviceJames Lopez2018-12-133-0/+7
| * | | Merge remote-tracking branch 'origin/security-48259-private-snippet-11-6' int...John Jarvis2018-12-271-0/+6
| |\ \ \ | | |_|/ | |/| |
| | * | Block private snippets from being embeddableMark Chao2018-12-201-0/+6
| | |/
* | | Merge branch 'security-11-6' of dev.gitlab.org:gitlab/gitlabhq into 11-6-stableJohn Jarvis2018-12-277-19/+66
|\ \ \ | |/ /
| * | Merge branch 'security-11-6-secret-ci-variables-exposed' into 'security-11-6'John Jarvis2018-12-275-14/+53
| |\ \
| | * | Backport security fix for 11.6Matija Čupić2018-12-085-14/+53
| | |/
| * | Merge branch 'ensure-that-build-token-is-always-running' into 'security-11-6'John Jarvis2018-12-271-0/+4
| |\ \
| | * | Ensure that build token is only used when runningKamil Trzciński2018-12-181-0/+4
| * | | Merge branch 'security-11-6-fix-ssrf-import-url-remote-mirror' into 'security...John Jarvis2018-12-272-5/+4
| |\ \ \
| | * | | Replaced UrlValidator with PublicUrlValidator for import_url and remote mirro...Francisco Javier López2018-12-132-5/+4
| | | |/ | | |/|
| * | | Delete confidential issue todos for guestsFelipe Artur2018-12-171-0/+5
| |/ /
* | | Merge branch 'sh-remove-gitlab-shell-include' into 'master'Rémy Coutable2018-12-176-6/+2
* | | Merge branch '54626-able-to-download-a-single-archive-file-with-api-by-ref-na...Grzegorz Bizon2018-12-171-0/+5
* | | Merge branch 'fix/gb/encrypt-ci-build-token' into 'master'Kamil Trzciński2018-12-171-1/+1
* | | Merge branch 'rs-revert-1e8f1de034aa9b6a60b640b2b091f60c4d3ba365' into 'master'Robert Speicher2018-12-171-1/+1
* | | Merge branch 'osw-suggest-diff-line-change' into 'master'Phil Hughes2018-12-145-1/+94
* | | Merge branch 'zj-fix-pool-creation' into 'master'Nick Thomas2018-12-141-3/+3
* | | Merge branch 'sh-revert-mr-22911' into 'master'Grzegorz Bizon2018-12-111-0/+1
* | | Merge branch 'sh-json-serialize-broadcast-messages' into 'master'Robert Speicher2018-12-111-3/+39
* | | Merge branch 'code-freeze-20181207' into 11-6-stable-prepare-rc5Alex Hanselka2018-12-1015-19/+316
|\ \ \ | |/ / |/| |
| * | Merge branch 'cert-manager-email' into 'master'Dmitriy Zaporozhets2018-12-071-0/+4
| |\ \
| | * | Allows user to override default issuer email for cert managerAmit Rathi2018-12-071-0/+4
| * | | Merge branch 'zj-pool-repository-creation' into 'master'Nick Thomas2018-12-072-0/+118
| |\ \ \
| | * | | Allow public forks to be deduplicatedZeger-Jan van de Weg2018-12-072-0/+118
| * | | | Merge branch 'ce-4326-one-notification-per-code-review' into 'master'Douwe Maan2018-12-071-2/+3
| |\ \ \ \ | | |/ / / | |/| | |