summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Update VERSION to 12.2.12v12.2.1212-2-stableGitLab Release Tools Bot2019-12-131-1/+1
* Update CHANGELOG.md for 12.2.12GitLab Release Tools Bot2019-12-131-0/+4
* Merge branch 'backport-21510-12-2' into '12-2-stable'John Skarbek2019-12-131-1/+1
|\
| * Install lsb-release for repo URL constructionKyle Wiebers2019-12-131-1/+1
|/
* Adds message to indicate we are skipping release 12.2.11John T Skarbek2019-12-131-0/+4
* Revert "Update CHANGELOG.md for 12.2.11"John T Skarbek2019-12-131-4/+0
* Revert "Update VERSION to 12.2.11"John T Skarbek2019-12-131-1/+1
* Update VERSION to 12.2.11v12.2.11GitLab Release Tools Bot2019-12-121-1/+1
* Update CHANGELOG.md for 12.2.11GitLab Release Tools Bot2019-12-121-0/+4
* Adds message to indicate we are skipping release 12.2.10John T Skarbek2019-12-121-0/+4
* Revert "Update VERSION to 12.2.10"John T Skarbek2019-12-121-1/+1
* Revert "Update CHANGELOG.md for 12.2.10"John T Skarbek2019-12-121-4/+0
* Update VERSION to 12.2.10v12.2.10GitLab Release Tools Bot2019-12-111-1/+1
* Update CHANGELOG.md for 12.2.10GitLab Release Tools Bot2019-12-111-0/+4
* Merge branch '12-2-stable-reliable-fetcher' into '12-2-stable'John Skarbek2019-12-1012-46/+47
|\
| * Fix spec, backportingValery Sizov2019-12-0910-43/+44
| * Backport reliable fetcherValery Sizov2019-12-092-3/+3
|/
* Merge remote-tracking branch 'dev/12-2-stable' into 12-2-stableGitLab Release Tools Bot2019-10-3083-167/+1382
|\
| * Update VERSION to 12.2.9v12.2.9GitLab Release Tools Bot2019-10-281-1/+1
| * Update CHANGELOG.md for 12.2.9GitLab Release Tools Bot2019-10-2815-68/+20
| * Merge branch 'security-id-fix-disclosure-of-private-repo-names-12-2' into '12...GitLab Release Tools Bot2019-10-253-1/+48
| |\
| | * Return 404 on LFS request if project doesn't existIgor Drozdov2019-10-253-1/+48
| |/
| * Merge branch 'security-bvl-validate-force-remove-branch-on-mrs-12-2-ce' into ...GitLab Release Tools Bot2019-10-2414-15/+191
| |\
| | * Only assign merge params when allowedBob Van Landuyt2019-10-2414-15/+191
| |/ |/|
| * Merge branch 'security-64519-circular-graphql-queries-12-2' into '12-2-stable'GitLab Release Tools Bot2019-10-248-12/+254
| |\
| | * Tweak test to insulate against magic number changescharlieablett2019-10-231-0/+1
| | * Allow tests to ignore recursioncharlieablett2019-10-082-1/+10
| | * Check for recursion and fail if too recursivecharlieablett2019-10-088-12/+244
| |/ |/|
| * Merge branch 'security-65756-ex-admin-attacker-can-comment-in-internal-12-2' ...GitLab Release Tools Bot2019-10-243-12/+42
| |\
| | * Improper access control allows the attacker to comment in internal commit aft...Charlie Ablett2019-10-243-12/+42
| |/
| * Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-reposi...GitLab Release Tools Bot2019-10-246-8/+101
| |\
| | * Backport for CE MREugenia Grieff2019-10-226-8/+101
| |/ |/|
| * Merge branch 'security-2920-fix-notes-with-label-cross-reference-12-2' into '...GitLab Release Tools Bot2019-10-244-1/+66
| |\
| | * 12.2 Backport for CE MREugenia Grieff2019-10-014-1/+66
| * | Merge branch 'security-ag-hide-private-members-in-project-member-autocomplete...GitLab Release Tools Bot2019-10-246-18/+186
| |\ \
| | * | Pick only those groups that the viewing user has access to,Aakriti Gupta2019-10-026-18/+186
| * | | Merge branch 'security-remove-leaky-401-responses-12.2' into '12-2-stable'GitLab Release Tools Bot2019-10-2412-22/+40
| |\ \ \
| | * | | Avoid #authenticate_user! in #route_not_foundKerri Miller2019-10-0912-22/+40
| |/ / / |/| | |
| * | | Merge branch 'security-mask-sentry-token-12-2-ce' into '12-2-stable'GitLab Release Tools Bot2019-10-246-4/+51
| |\ \ \
| | * | | Mask Sentry auth tokenRyan Cobb2019-10-166-4/+51
| |/ / / |/| | |
| * | | Merge branch 'security-stored-xss-using-find-file-12-2' into '12-2-stable'GitLab Release Tools Bot2019-10-242-1/+7
| |\ \ \
| | * | | Sanitize search text to prevent XSSSamantha Ming2019-10-102-1/+7
| |/ / / |/| | |
| * | | Merge branch 'security-developer-transfer-project-12-2' into '12-2-stable'GitLab Release Tools Bot2019-10-248-2/+128
| |\ \ \
| | * | | Require maintainer permission to transfer projectsmanojmj2019-10-118-2/+128
| |/ / / |/| | |
| * | | Merge branch 'security-open-redirect-internalredirect-12-2' into '12-2-stable'GitLab Release Tools Bot2019-10-243-2/+8
| |\ \ \
| | * | | Add changelog entryJoern Schneeweisz2019-10-141-0/+5
| | * | | Use the '\A' and '\z' regex anchors in `InternalRedirect` to mitigate an Open...Joern Schneeweisz2019-10-142-2/+3
| |/ / / |/| | |
| * | | Merge branch 'security-wiki-rdoc-content-12-2-ce' into '12-2-stable'GitLab Release Tools Bot2019-10-246-44/+74
| |\ \ \
| | * | | Pass all wiki markup formats through pipelinesLuke Duncalfe2019-10-176-44/+74
| |/ / / |/| | |
| * | | Merge branch 'security-xss-grafana-url-12-2' into '12-2-stable'GitLab Release Tools Bot2019-10-248-15/+189
| |\ \ \