delta/gitlab/gitlab-ce.git - gitlab.com: gitlab-org/gitlab-ce.git

	Commit message (Expand)	Author	Age	Files	Lines
...
\| \| * \| \| \| \| \| \| \|	Merge branch 'fix/security-group-user-removal' into 'master'	Yorick Peterse	2019-01-25	3	-7/+59
\| \| \|\ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \|	Add subresources removal to member destroy service	James Lopez	2019-01-25	3	-7/+59
\| \| * \| \| \| \| \| \| \| \|	Merge branch 'security-import-path-logging' into 'master'	Yorick Peterse	2019-01-25	4	-3/+51
\| \| \|\ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \|	Fix path disclosure on Project Import	James Lopez	2019-01-07	4	-3/+51
\| \| * \| \| \| \| \| \| \| \| \|	Merge branch 'security-guests-can-see-list-of-merge-requests' into 'master'	Yorick Peterse	2019-01-25	3	-9/+110
\| \| \|\ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \|	Group Guests are no longer able to see merge requests	Tiago Botelho	2019-01-21	3	-9/+110
\| \| * \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-import-project-visibility' into 'master'	Yorick Peterse	2019-01-25	2	-1/+146
\| \| \|\ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \|	Fix tree restorer visibility level	James Lopez	2019-01-24	2	-1/+146
\| \| * \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-contributed-projects' into 'master'	Yorick Peterse	2019-01-25	2	-0/+44
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \|	Fix contributed projects finder shown private info	James Lopez	2019-01-08	2	-0/+44
\| \| * \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-do-not-process-mr-ref-for-guests' into 'master'	Yorick Peterse	2019-01-25	1	-1/+11
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \|	Don't process MR refs for guests in the notes	Oswaldo Ferreira	2019-01-10	1	-1/+11
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-22076-sanitize-url-in-names' into 'master'	Yorick Peterse	2019-01-25	2	-3/+19
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \|	Use `sanitize_name` to sanitize URL in user full name	Kushal Pandya	2019-01-22	1	-3/+5
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \|	Add `sanitize_name` helper to sanitize URLs in user full name	Kushal Pandya	2019-01-22	1	-0/+14
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'sh-fix-import-redirect-vulnerability' into 'master'	Yorick Peterse	2019-01-25	2	-3/+16
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Alias GitHub and BitBucket OAuth2 callback URLs	Stan Hu	2019-01-22	2	-3/+16
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[master] Check access rights when creating/updating ProtectedRefs	Francisco Javier López	2019-01-25	1	-15/+8
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-55320-stored-xss-in-user-status' into 'master'	Tim Zallmann	2019-01-25	1	-3/+3
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \| \| \| \|_\|_\|_\|_\|_\|_\|_\|/ / / / / / / / \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Use sanitized user status message for user popover	Dennis Tang	2019-01-23	1	-3/+3
\| \| \| \|/ / / / / / / / / / / / / /
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-2767-verify-lfs-finalize-from-workhorse' into 'master'	Yorick Peterse	2019-01-24	1	-5/+18
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Verify that LFS upload requests are genuine	Nick Thomas	2019-01-22	1	-5/+18
\| \| \| \|/ / / / / / / / / / / / / /
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-project-move-users' into 'master'	Yorick Peterse	2019-01-24	2	-6/+38
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Sent notification only to authorized users	Jan Provaznik	2019-01-23	2	-6/+38
\| \| \| \|/ / / / / / / / / / / / / /
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-fix-user-email-tag-push-leak' into 'master'	Yorick Peterse	2019-01-24	1	-2/+2
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix private user email being visible in tag webhooks	Luke Duncalfe	2019-01-18	1	-2/+2
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Prefer build() rather than create()	Luke Duncalfe	2019-01-15	1	-1/+1
\| \| \| \| \|/ / / / / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	[master] Resolve "[Security] Stored XSS via KaTeX"	Constance Okoghenun	2019-01-24	1	-1/+17
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'extract-pages-with-rubyzip' into 'master'	Yorick Peterse	2019-01-24	10	-9/+356
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Extract GitLab Pages using RubyZip	Kamil Trzciński	2019-01-22	10	-9/+356
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-commit-status-shown-for-guest-user' into 'master'	Yorick Peterse	2019-01-24	1	-0/+21
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Stop showing ci for guest users	Steve Azzopardi	2019-01-23	1	-0/+21
\| \| \| \| \|_\|_\|_\|_\|/ / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-fix-lfs-import-project-ssrf-forgery' into 'master'	Yorick Peterse	2019-01-24	6	-53/+240
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Added validations to prevent LFS object forgery	Francisco Javier López	2019-01-21	6	-53/+240
\| \| \| \| \|_\|_\|_\|_\|/ / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-pipeline-trigger-tokens-exposure' into 'master'	Yorick Peterse	2019-01-24	2	-5/+60
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix subject in trigger presenter tests	Grzegorz Bizon	2019-01-15	1	-1/+1
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Add some specs for trigger presenter	Grzegorz Bizon	2019-01-15	1	-0/+51
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Do not expose trigger token when user should not see it	Grzegorz Bizon	2019-01-15	1	-5/+9
\| \| \| \| \|_\|_\|/ / / / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-fix-regex-dos' into 'master'	Yorick Peterse	2019-01-24	1	-0/+6
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix slow project reference pattern regex	Heinrich Lee Yu	2019-01-11	1	-0/+6
\| \| \| \| \|_\|_\|_\|_\|/ / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-fix-wiki-access-rights-with-external-wiki-enabled' int...	Yorick Peterse	2019-01-24	5	-28/+92
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fixed bug when external wiki is enabled	Francisco Javier López	2019-01-18	5	-28/+92
\| \| \| \| \|_\|/ / / / / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-2769-idn-homograph-attack' into 'master'	Yorick Peterse	2019-01-24	4	-0/+133
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Show tooltip for malicious looking links	Brett Walker	2019-01-21	4	-0/+133
\| \| \| \| \|_\|_\|_\|_\|_\|/ / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-fix-new-issues-login-message' into 'master'	Yorick Peterse	2019-01-24	1	-1/+1
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Use common error for unauthenticated users	Heinrich Lee Yu	2019-01-14	1	-1/+1
\| \| \| \| \|_\|_\|/ / / / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-2776-fix-add-reaction-permissions' into 'master'	Yorick Peterse	2019-01-24	1	-0/+2
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Prevent award_emoji to notes not visible to user	Heinrich Lee Yu	2019-01-15	1	-0/+2
\| \| \| \|/ / / / / / / / / / / / / / /
\| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Merge branch 'security-2779-fix-email-comment-permissions-check' into 'master'	Yorick Peterse	2019-01-24	6	-22/+79
\| \| \|\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\| \| \| * \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Prevent comments by email when issue is locked	Heinrich Lee Yu	2019-01-22	6	-22/+79
\| \| \| \| \|_\|_\|_\|_\|/ / / / / / / / / / \| \| \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|