| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Allow UrlValidator to work with attr_encrypted | Nick Thomas | 2018-09-17 | 1 | -0/+15 |
| | | |||||
| * | Merge branch 'filter-web-hooks-by-branch' into 'master' | Dmitriy Zaporozhets | 2018-09-05 | 1 | -0/+42 |
| |\ | | | | | | | | | Filter web hooks by branch See merge request gitlab-org/gitlab-ce!19513 | ||||
| | * | Filter project hooks by branch | Duana Saskia | 2018-08-13 | 1 | -0/+42 |
| | | | | | | | | | | | | | Allow specificying a branch filter for a project hook and only trigger a project hook if either the branch filter is blank or the branch matches. Only supported for push_events for now. | ||||
| * | | Allow whitelisting for "external collaborator by default" setting | Roger Rüttimann | 2018-08-30 | 1 | -0/+27 |
| |/ | |||||
| * | Avoid checking the user format in every url validation | Francisco Javier López | 2018-06-11 | 1 | -5/+48 |
| | | |||||
| * | Add validation to webhook and service URLs to ensure they are not blocked ↵ | Francisco Javier López | 2018-06-01 | 3 | -65/+70 |
| | | | | | because of SSRF | ||||
| * | Projects and groups badges API | Francisco Javier López | 2018-03-05 | 2 | -0/+85 |
| | | |||||
| * | Add more information in variable_duplicates validator error message | Matija Čupić | 2018-02-13 | 1 | -2/+2 |
| | | |||||
| * | Add specs for VariableDuplicates validator | Matija Čupić | 2018-02-13 | 1 | -0/+67 |
| | | |||||
| * | Validate User username only on Namespace, and bubble up appropriately | Douwe Maan | 2018-02-06 | 1 | -38/+0 |
| | | |||||
| * | Reallow project paths ending in periodsdm-reallow-project-path-ending-in-period | Douwe Maan | 2017-11-06 | 4 | -97/+114 |
| | | |||||
| * | Change all `:empty_project` to `:project`rs-empty_project-default | Robert Speicher | 2017-08-02 | 1 | -2/+2 |
| | | |||||
| * | Ensure all project factories use `:repository` trait or `:empty_project`rs-empty_project-cleanup | Robert Speicher | 2017-08-01 | 1 | -1/+1 |
| | | |||||
| * | Rebuild the dynamic path before validating itbvl-validate-path-update | Bob Van Landuyt | 2017-06-21 | 1 | -0/+9 |
| | | | | | | Otherwise we won't validate updates to the path. Allowing users to change the path to something that's not allowed. | ||||
| * | Avoid crash when trying to parse string with invalid UTF-8 sequence | Bob Van Landuyt | 2017-05-30 | 1 | -0/+22 |
| | | |||||
| * | Revert "Remove changes that are not absolutely necessary" | Douwe Maan | 2017-05-24 | 1 | -7/+7 |
| | | | | This reverts commit b0498c176fa134761d899c9b369be12f1ca789c5 | ||||
| * | Remove changes that are not absolutely necessarydm-fix-routes | Douwe Maan | 2017-05-23 | 1 | -7/+7 |
| | | |||||
| * | Fix ambiguous routing issues by teaching router about reserved words | Douwe Maan | 2017-05-23 | 1 | -225/+25 |
| | | |||||
| * | Add a better error message when a certain path is missing | Bob Van Landuyt | 2017-05-02 | 1 | -3/+34 |
| | | |||||
| * | Update path validation & specs | Bob Van Landuyt | 2017-05-02 | 1 | -3/+40 |
| | | |||||
| * | Reuse Gitlab::Regex.full_namespace_regex in the DynamicPathValidator | Bob Van Landuyt | 2017-05-02 | 1 | -1/+10 |
| | | |||||
| * | Reject group-routes as names of child namespaces | Bob Van Landuyt | 2017-05-01 | 1 | -25/+51 |
| | | |||||
| * | Reject paths following namespace for paths including 2 `*` | Bob Van Landuyt | 2017-05-01 | 1 | -12/+14 |
| | | | | | | Reject the part following `/*namespace_id/:project_id` for paths containing 2 wildcard parameters | ||||
| * | Use `%r{}` regexes to avoid having to escape `/` | Bob Van Landuyt | 2017-05-01 | 1 | -5/+5 |
| | | |||||
| * | The dynamic path validator can block out partial paths | Bob Van Landuyt | 2017-05-01 | 1 | -60/+80 |
| | | | | | So we can block `objects` only when it is contained in `info/lfs` or `gitlab-lfs` | ||||
| * | Make path validation case-insensitive | Bob Van Landuyt | 2017-05-01 | 1 | -1/+7 |
| | | |||||
| * | Rename `NamespaceValidator` to `DynamicPathValidator` | Bob Van Landuyt | 2017-05-01 | 1 | -1/+1 |
| | | | | | This reflects better that it validates paths instead of a namespace model | ||||
| * | Split off validating full paths | Bob Van Landuyt | 2017-05-01 | 1 | -0/+20 |
| | | | | | | The first part of a full path needs to be validated as a `top_level` while the rest need to be validated as `wildcard` | ||||
| * | Improve detection of reserved words from routes | Bob Van Landuyt | 2017-05-01 | 1 | -14/+67 |
| | | |||||
| * | Streamline the path validation in groups & projects | Bob Van Landuyt | 2017-05-01 | 1 | -0/+33 |
| | | | | | | | | | | | | | `Project` uses `ProjectPathValidator` which is now a `NamespaceValidator` that skips the format validation. That way we're sure we are using the same collection of reserved paths. I updated the path constraints to reflect the changes: We now allow some values that are only used on a top level namespace as a name for a nested group/project. | ||||
| * | Add forbidden paths to the namespace validator | Bob Van Landuyt | 2017-05-01 | 1 | -0/+29 |
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |