summaryrefslogtreecommitdiff
path: root/spec
Commit message (Expand)AuthorAgeFilesLines
* Comply with `no-implicit-coercion` rule (CE)Nathan Friend2019-06-033-3/+7
* Backporting EE fixrossfuhrman2019-06-031-36/+38
* Move boardsStore.moving to BoardList componentWinnie Hellmann2019-06-031-0/+12
* Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhqRobert Speicher2019-06-035-2/+72
|\
| * Merge branch 'security-60143-address-xss-issue-master' into 'master'Robert Speicher2019-06-031-0/+42
| |\
| | * Reject slug+uri concat if slug is deemed unsafeKerri Miller2019-05-241-0/+42
| * | Merge branch 'security-58856-persistent-xss-in-note-objects' into 'master'Robert Speicher2019-06-034-2/+30
| |\ \
| | * | Remove unused fixture linesTiger2019-05-281-2/+0
| | * | Add `html` to sensitive wordscharlieablett2019-05-012-2/+3
| | * | Remove accidental regressionscharlieablett2019-04-301-5/+6
| | * | Ensure Issue & MR note_html cannot be importedAsh McKenzie2019-04-302-16/+16
| | * | Add disallowed fields to AttributeCleanercharlieablett2019-04-242-10/+8
| | * | Re-stub stubbed method callscharlieablett2019-04-231-3/+9
| | * | Exclude fields from note importcharlieablett2019-04-232-2/+26
* | | | Merge branch 'osw-sync-merge-ref-upon-mergeability-check' into 'master'Douwe Maan2019-06-035-141/+251
|\ \ \ \
| * | | | Add payload to the service responseOswaldo Ferreira2019-05-312-0/+111
| * | | | Automatically update MR merge-ref along merge statusOswaldo Ferreira2019-05-314-141/+140
* | | | | Merge branch '58269-separate-update-patch' into 'master'Mike Greiling2019-06-033-60/+180
|\ \ \ \ \
| * | | | | Add updateSuccessful/Failed props to knative appEnrique Alcantara2019-05-301-0/+2
| * | | | | Extract knative domain editor into a componentEnrique Alcantara2019-05-302-60/+178
* | | | | | Cleans up UpdateProjectStatistics concernMayra Cabrera2019-06-032-10/+11
* | | | | | Merge branch 'issafeurl-utility' into 'master'Kushal Pandya2019-06-031-0/+84
|\ \ \ \ \ \
| * | | | | | Add global isSafeURL utilityissafeurl-utilityPaul Gascou-Vaillancourt2019-06-031-0/+84
* | | | | | | Move NoteApp tests to JestWinnie Hellmann2019-06-032-106/+103
* | | | | | | Merge dev.gitlab.org master into GitLab.com masterYorick Peterse2019-06-0341-128/+883
|\ \ \ \ \ \ \ | | |_|_|/ / / | |/| | | | |
| * | | | | | Merge branch 'security-jej/prevent-web-sign-in-bypass' into 'master'GitLab Release Tools Bot2019-06-031-1/+33
| |\ \ \ \ \ \
| | * | | | | | Prevent password sign in restriction bypassJames Edwards-Jones2019-05-211-1/+33
| * | | | | | | Merge branch 'security-fix_milestones_search_api_leak' into 'master'GitLab Release Tools Bot2019-06-033-4/+83
| |\ \ \ \ \ \ \
| | * | | | | | | Resolve: Milestones leaked via search APIFelipe Artur2019-05-203-4/+83
| * | | | | | | | Merge branch 'security-60039' into 'master'GitLab Release Tools Bot2019-06-035-31/+106
| |\ \ \ \ \ \ \ \
| | * | | | | | | | Refactor spec to not use truthy or falseyMark Chao2019-05-031-58/+58
| | * | | | | | | | Use full ref when creating MR pipeline in specsMark Chao2019-05-031-3/+3
| | * | | | | | | | Validate MR branch namesMark Chao2019-05-034-28/+103
| * | | | | | | | | Merge branch 'security-id-leaked-password-in-import-url-frontend' into 'master'GitLab Release Tools Bot2019-06-034-2/+105
| |\ \ \ \ \ \ \ \ \
| | * | | | | | | | | Handling password on import by url pageSam Bigelow2019-05-291-2/+12
| | * | | | | | | | | Hide password on import by url formIgor Drozdov2019-05-293-0/+93
| * | | | | | | | | | Merge branch 'dm-http-hostname-override' into 'master'GitLab Release Tools Bot2019-06-0325-66/+405
| |\ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | Add DNS rebinding protection settingsOswaldo Ferreira2019-05-304-1/+101
| | * | | | | | | | | | Protect Gitlab::HTTP against DNS rebinding attackDouwe Maan2019-05-3023-65/+304
| * | | | | | | | | | | Merge branch 'security-fix-project-existence-disclosure-master' into 'master'GitLab Release Tools Bot2019-06-031-14/+18
| |\ \ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | | Fix url redaction for issue linksPatrick Derichs2019-05-031-14/+18
| * | | | | | | | | | | | Merge branch 'security-unsubscribing-from-issue' into 'master'GitLab Release Tools Bot2019-06-031-10/+99
| |\ \ \ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | | | Hide issue title on unsubscribe for anonymous usersAlexandru Croitor2019-05-161-10/+99
| * | | | | | | | | | | | | Merge branch 'security-fix-confidential-issue-label-visibility-master' into '...GitLab Release Tools Bot2019-06-031-0/+34
| |\ \ \ \ \ \ \ \ \ \ \ \ \ | | |_|_|/ / / / / / / / / / | |/| | | | | | | | | | | |
| | * | | | | | | | | | | | Fix confidential issue label disclosure on milestone viewPatrick Derichs2019-05-141-0/+34
* | | | | | | | | | | | | | Merge branch 'ac-graphql-stats' into 'master'Dmitriy Zaporozhets2019-06-0310-5/+256
|\ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | Add Namespace and ProjectStatistics to GraphQL APIAlessio Caiazza2019-06-0310-5/+256
* | | | | | | | | | | | | | | Merge branch 'abstract-auto-merge' into 'master'Kamil TrzciƄski2019-06-0317-66/+306
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | | Fix frontend tests related to autoMergeStrategyabstract-auto-mergeNathan Friend2019-06-033-13/+17
| * | | | | | | | | | | | | | | Abstract auto merge processesShinya Maeda2019-06-0316-57/+293
| | |_|_|_|_|_|_|_|_|_|_|/ / / | |/| | | | | | | | | | | | |