diff options
| author | Marin Jankovski <marin@gitlab.com> | 2015-02-20 22:47:54 +0000 |
|---|---|---|
| committer | Marin Jankovski <marin@gitlab.com> | 2015-02-20 22:47:54 +0000 |
| commit | 8ae3112b3f303c897c70952dd162589b1c394221 (patch) | |
| tree | f1ee6b9013604a688cd06c75cc64650c564b3ff2 /lib/api/files.rb | |
| parent | acc312fc257cd8534ccbbeab6e7bf70dca60279b (diff) | |
| parent | 26d57a648c09f40bd1da3c81a0efe3661288b1af (diff) | |
| download | gitlab-ce-8ae3112b3f303c897c70952dd162589b1c394221.tar.gz | |
Merge branch 'upload-xss-access-control' into 'master'
Fix note attachments XSS and access control
Replaces the reverted #1528, as proposed in https://gitlab.com/gitlab-org/omnibus-gitlab/issues/434, as discussed with @dzaporozhets and as summarized in #2032.
@marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged?
See merge request !1553
Diffstat (limited to 'lib/api/files.rb')
0 files changed, 0 insertions, 0 deletions