| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add array support for labels | Alexandru Croitor | 2019-03-06 | 1 | -0/+24 |
| | | | | | | * Support label parameter as comma separated and array of strings for merge requests and issues api endpoints | ||||
| * | Validate Wiki attachments are valid temporary files | Stan Hu | 2018-10-23 | 1 | -0/+15 |
| A malicious attacker could craft a request to read arbitrary files on the system. This change adds a Grape validation to ensure that the tempfile parameter delivered by the Rack multipart uploader is a Tempfile type to prevent users from being able to specify arbitrary filenames. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/53072 | |||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |