summaryrefslogtreecommitdiff
path: root/spec
Commit message (Expand)AuthorAgeFilesLines
* Merge branch '66641-broken-master-real-http-connections-are-disabled-unregist...Jan Provaznik2019-08-283-16/+24
* Avoid exposing unaccessible repo data upon GFM processingOswaldo Ferreira2019-08-262-2/+76
* Prevent unauthorised comments on merge requestsAlex Kalderimis2019-08-263-71/+357
* Merge branch 'security-hide_merge_request_ids_on_emails-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-262-18/+78
|\
| * Prevent disclosure of merge request id via emailFelipe Artur2019-08-212-18/+78
* | Merge branch 'security-64711-fix-commit-todos-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-16/+105
|\ \
| * | Send TODOs for comments on commits correctlyNick Thomas2019-08-231-16/+105
| |/
* | Fix project import restricted visibility bypassGeorge Koltsov2019-08-262-15/+135
* | Merge branch 'security-ssrf-kubernetes-dns' into '12-2-stable'GitLab Release Tools Bot2019-08-263-18/+215
|\ \
| * | Column was renamed in 12.2Thong Kuah2019-08-211-1/+1
| * | Override hostname when connecting via KubeclientThong Kuah2019-08-213-18/+215
| |/
* | Merge branch 'security-fix-html-injection-for-label-description-ce-12-2' into...GitLab Release Tools Bot2019-08-262-0/+17
|\ \
| * | Fix html injection for label descriptionPatrick Derichs2019-08-192-0/+17
| |/
* | Merge branch 'security-mr-head-pipeline-leak-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-4/+26
|\ \
| * | Permission fix for MergeRequestsController#pipeline_statusdrew cimino2019-08-201-4/+26
| |/
* | Merge branch 'security-61974-limit-issue-comment-size-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-264-4/+47
|\ \
| * | Limit the size of issuable description and commentsAlexandru Croitor2019-08-224-4/+47
| |/
* | Merge branch 'security-12-2-enable-image-proxy' into '12-2-stable'GitLab Release Tools Bot2019-08-2611-1/+324
|\ \
| * | Fix failing spec due to changes UpdateServiceBrett Walker2019-08-201-1/+1
| * | Add support for using a Camo proxy serverBrett Walker2019-08-2010-0/+323
| |/
* | Merge branch 'security-fix_jira_ssrf_vulnerability-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-0/+5
|\ \
| * | Fix DNS rebind vulnerability for JIRA integrationFelipe Artur2019-08-191-0/+5
| |/
* | Merge branch 'security-sarcila-fix-weak-session-management-12-2' into '12-2-s...GitLab Release Tools Bot2019-08-262-0/+58
|\ \
| * | Add User#will_save_change_to_login? to clear reset_password_tokensSebastian Arcila Valenzuela2019-08-212-0/+58
| |/
* | Merge branch 'security-59549-add-capcha-for-failed-logins-12-2' into '12-2-st...GitLab Release Tools Bot2019-08-264-18/+171
|\ \
| * | Add captcha if there are multiple failed login attemptsMałgorzata Ksionek2019-08-214-18/+171
| |/
* | Merge branch 'security-katex-dos-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-2/+4
|\ \
| * | Enforce max chars and max render time in markdown mathMartin Hanzel2019-08-211-2/+4
| |/
* | Merge branch 'security-ci-metrics-permissions-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-8/+52
|\ \
| * | Restrict MergeRequests#test_reports to authenticated users with read-access o...drew cimino2019-08-221-8/+52
| |/
* | Merge branch 'security-personal-snippets-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-263-3/+44
|\ \
| * | Add direct upload support for personal snippetsJan Provaznik2019-08-233-3/+44
| |/
* | Merge branch 'security-group-runners-permissions-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-261-38/+167
|\ \
| * | admin_group authorization for Groups::RunnersControllerdrew cimino2019-08-221-38/+167
| |/
* | Merge branch 'security-fix-markdown-xss-12-2' into '12-2-stable'GitLab Release Tools Bot2019-08-263-0/+36
|\ \
| * | Re-escape whole HTML content instead of only matchJan Provaznik2019-08-233-0/+36
| |/
* | Merge branch 'tr-param-undefined-fix' into 'master'Clement Ho2019-08-231-0/+20
* | Merge branch 'sh-fix-issues-api-gitaly-nplusone' into 'master'Sean McGivern2019-08-233-0/+13
|/
* Merge branch 'sh-fix-pipelines-not-being-created' into 'master'Nick Thomas2019-08-191-0/+16
* UI for disabling group/project email notificationBrett Walker2019-08-178-0/+137
* Merge branch 'legacy-attachments-migrate-fix' into 'master'Michael Kozono2019-08-163-4/+360
|\
| * Add rake tasks for migrating leacy uploadslegacy-attachments-migrate-fixJarka Košanová2019-08-163-4/+360
* | Merge branch '66023-starrers-count-do-not-match-after-searching' into 'master'Stan Hu2019-08-161-40/+112
|\ \
| * | Fix starrers counters after searchingDouglas Barbosa Alexandre2019-08-151-40/+112
* | | Merge branch 'dm-process-commit-worker-n+1' into 'master'Stan Hu2019-08-162-50/+60
|\ \ \
| * | | Look up upstream commits once before queuing ProcessCommitWorkersDouwe Maan2019-08-162-50/+60
* | | | Expire project caches once per push instead of once per refStan Hu2019-08-165-12/+144
* | | | Remove Security Dashboard feature flagrossfuhrman2019-08-161-5/+0
* | | | Add clipboard button to metric chart dropdownTristan Read2019-08-162-2/+86
* | | | Merge branch 'mc/feature/pipeline-tracking-config-ce' into 'master'Kamil Trzciński2019-08-165-7/+40
|\ \ \ \
View Lorry Controller Status