summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix broken internal links in docs12-0-stable-docs-lint-fixVladimir Shushlin2019-08-012-3/+2
* Update VERSION to 12.0.4v12.0.4GitLab Release Tools Bot2019-07-251-1/+1
* Update CHANGELOG.md for 12.0.4GitLab Release Tools Bot2019-07-2510-45/+15
* Merge branch 'security-fix-badges-leaked-to-unauthorized-users-12-0' into '12...GitLab Release Tools Bot2019-07-243-31/+101
|\
| * Don't display badges when builds are restrictedFabio Pitino2019-06-273-31/+101
* | Merge branch 'security-github-ssrf-redirect-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-246-3/+100
|\ \
| * | Do not allow localhost url redirection in GitHub Integrationmanojmj2019-07-096-3/+100
* | | Merge branch 'security-dns-ssrf-bypass-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-244-15/+51
|\ \ \
| * | | Fix Server Side Request Forgery mitigation bypassFrancisco Javier López2019-07-044-15/+51
| |/ /
* | | Merge branch 'security-mr-pipeline-permissions-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-244-6/+102
|\ \ \
| * | | Use MergeRequest#source_project as permissions reference for MergeRequest#all...drew cimino2019-07-054-6/+102
| |/ /
* | | Merge branch 'security-60143-patch-additional-xss-issue-12.0' into '12-0-stable'GitLab Release Tools Bot2019-07-249-93/+233
|\ \ \
| * | | Extract SanitizeNodeLink and apply to WikiLinkFilterKerri Miller2019-07-089-93/+233
| |/ /
* | | Merge branch 'security-remove-take-trigger-ownership-feature-12-0' into '12-0...GitLab Release Tools Bot2019-07-2411-141/+9
|\ \ \
| * | | Drop feature to take ownership of a trigger tokenFabio Pitino2019-07-1711-141/+9
* | | | Merge branch 'security-2873-restrict-slash-commands-to-users-who-can-log-in-1...GitLab Release Tools Bot2019-07-245-0/+51
|\ \ \ \
| * | | | Restrict slash commands to users who can log inHordur Freyr Yngvason2019-07-125-0/+51
| | |/ / | |/| |
* | | | Merge branch 'security-bvl-filter-mr-params-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-244-8/+83
|\ \ \ \
| * | | | Filter params in MR build serviceBob Van Landuyt2019-07-174-8/+83
| | |/ / | |/| |
* | | | Merge branch 'security-hide_moved_issue_id-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-243-1/+44
|\ \ \ \ | |/ / / |/| | |
| * | | Do not show moved issue ids for user not authorizedFelipe Artur2019-07-153-1/+44
| |/ /
* | | Merge branch 'sh-fix-appearance-spec-failure' into 'master'Douglas Barbosa Alexandre2019-07-161-2/+1
|/ /
* | Update CHANGELOG.md for 12.0.3v12.0.3GitLab Release Tools Bot2019-07-011-0/+1
* | Merge branch 'security-support-object-storage-at-file-mover-12-0' into '12-0-...Marin Jankovski2019-07-012-54/+126
|\ \
| * | Support object storage at FileMover classOswaldo Ferreira2019-06-302-54/+126
|/ /
* | Update VERSION to 12.0.3GitLab Release Tools Bot2019-06-271-1/+1
* | Update CHANGELOG.md for 12.0.3GitLab Release Tools Bot2019-06-2711-50/+16
|/
* Merge branch 'security-notes-in-private-snippets-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-265-10/+132
|\
| * Correctly check permissions when creating snippet notesMarkus Koller2019-06-065-10/+132
* | Merge branch 'security-fp-prevent-billion-laughs-attack-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-267-8/+249
|\ \
| * | Prevent Billion Laughs attackFabio Pitino2019-06-077-8/+249
| |/
* | Merge branch 'security-12-0-mr-head-pipeline-leak' into '12-0-stable'GitLab Release Tools Bot2019-06-263-1/+33
|\ \
| * | Add CHANGELOG entryMatija Čupić2019-06-121-0/+5
| * | Gate MR head_pipeline behind read_pipeline abilityMatija Čupić2019-06-122-1/+28
| |/
* | Merge branch 'security-prevent-detection-of-merge-request-template-name-12-0'...GitLab Release Tools Bot2019-06-266-32/+130
|\ \
| * | Authorize access before serving project templateLuke Duncalfe2019-06-176-32/+130
| |/
* | Merge branch 'security-persist-tmp-snippet-uploads-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-2612-105/+202
|\ \
| * | Persist tmp snippet uploadsOswaldo Ferreira2019-06-1712-105/+202
| |/
* | Merge branch 'security-59581-related-merge-requests-count-12-0' into '12-0-st...GitLab Release Tools Bot2019-06-2619-54/+192
|\ \
| * | Expose merge requests count based on user accessAlexandru Croitor2019-06-1819-54/+192
* | | Merge branch 'security-DOS_issue_comments_banzai-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-263-1/+11
|\ \ \
| * | | Fix linter failureMario de la Ossa2019-06-181-2/+1
| * | | Fix DOS when rendering issue/MR commentsMario de la Ossa2019-06-183-1/+12
| |/ /
* | | Merge branch 'security-bvl-enforce-graphql-type-authorization-12-0' into '12-...GitLab Release Tools Bot2019-06-2615-47/+103
|\ \ \
| * | | Fix failing auhtorizations in GraphQLBob Van Landuyt2019-06-2015-47/+103
* | | | Merge branch 'security-2858-fix-color-validation-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-263-1/+49
|\ \ \ \
| * | | | Fix color validation regexHeinrich Lee Yu2019-06-253-1/+49
* | | | | Merge branch 'security-fix-issue-59379-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-264-2/+13
|\ \ \ \ \
| * | | | | Disable Rails SQL query cache when applying service templatesStan Hu2019-06-254-2/+13
* | | | | | Merge branch '12-0-stable-backport-deploy-board-doc' into '12-0-stable'Marin Jankovski2019-06-261-2/+5
|\ \ \ \ \ \ | |/ / / / / |/| | | | |
View Lorry Controller Status