summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'ce-9445-kerberos-clone-url-is-no-longer-visible' into 'master'cherry-pick-c9e5ce8dKushal Pandya2019-03-062-2/+4
* Update VERSION to 11.8.1v11.8.1GitLab Release Tools Bot2019-02-281-1/+1
* Update CHANGELOG.md for 11.8.1GitLab Release Tools Bot2019-02-2822-107/+27
* Merge branch '11-8-security-2774-milestones-detail' into '11-8-stable'Robert Speicher2019-02-274-4/+112
|\
| * Display only informaton visible to current userJarka Košanová2019-02-274-4/+112
|/
* Merge branch 'security-id-fix-mr-visibility-11-8' into '11-8-stable'Yorick Peterse2019-02-277-213/+335
|\
| * Display the correct number of MRs a user has access toIgor Drozdov2019-02-277-213/+335
|/
* Merge branch 'security-2818_filter_impersonated_sessions-11-8' into '11-8-sta...Yorick Peterse2019-02-278-52/+38
|\
| * Remove ability to revoke active sessionImre Farkas2019-02-276-49/+7
| * Filter active sessions belonging to an admin impersonating the userImre Farkas2019-02-274-4/+32
* | Merge branch 'security-id-restricted-access-to-private-repo-11-8' into '11-8-...Yorick Peterse2019-02-275-60/+137
|\ \
| * | Forbid creating discussions for users with restricted accessIgor Drozdov2019-02-075-60/+137
* | | Merge branch '11-8-security-2773-milestones-fix' into '11-8-stable'Yorick Peterse2019-02-2719-73/+187
|\ \ \
| * | | Check issue milestone availabilityJarka Košanová2019-02-1319-73/+187
* | | | Merge branch 'security-tags-oracle-11-8' into '11-8-stable'Yorick Peterse2019-02-273-0/+23
|\ \ \ \
| * | | | Prevent Releases links API to leak tag existanceAlessio Caiazza2019-02-133-0/+23
| |/ / /
* | | | Merge branch 'security-2798-fix-boards-policy-11-8' into '11-8-stable'Yorick Peterse2019-02-273-8/+19
|\ \ \ \
| * | | | Disable board policies when issues are disabledHeinrich Lee Yu2019-02-143-8/+19
* | | | | Merge branch '11-8-security-2797-milestone-mrs' into '11-8-stable'Yorick Peterse2019-02-274-4/+61
|\ \ \ \ \
| * | | | | Show only MRs visible to user on milestone detailJarka Košanová2019-02-144-4/+61
| |/ / / /
* | | | | Merge branch 'security-commit-private-related-mr-11-8' into '11-8-stable'Yorick Peterse2019-02-276-6/+65
|\ \ \ \ \
| * | | | | Don't allow non-members to see private related MRsPatrick Bajao2019-02-156-6/+65
* | | | | | Merge branch 'security-kubernetes-google-login-csrf-11-8' into '11-8-stable'Yorick Peterse2019-02-273-30/+67
|\ \ \ \ \ \
| * | | | | | Validate session key when authorizing with GCP to create a clusterTiger2019-02-193-30/+67
* | | | | | | Merge branch 'security-50334-11-8' into '11-8-stable'Yorick Peterse2019-02-275-66/+82
|\ \ \ \ \ \ \
| * | | | | | | Fix git clone revealing private repo's presenceMark Chao2019-02-195-66/+82
| |/ / / / / /
* | | | | | | Merge branch 'security-56348-11-8' into '11-8-stable'Yorick Peterse2019-02-275-2/+60
|\ \ \ \ \ \ \
| * | | | | | | Check snippet attached file to be moved is within designated directoryMark Chao2019-02-215-2/+60
| |/ / / / / /
* | | | | | | Merge branch 'security-55468-check-validity-before-querying-11-8' into '11-8-...Yorick Peterse2019-02-273-19/+53
|\ \ \ \ \ \ \
| * | | | | | | Check validity of prometheus_service before queryReuben Pereira2019-02-273-19/+53
|/ / / / / / /
* | | | | | | Merge branch 'security-protect-private-repo-information-11-8' into '11-8-stable'Yorick Peterse2019-02-276-22/+85
|\ \ \ \ \ \ \
| * | | | | | | Add changelog entryLuke Duncalfe2019-02-211-0/+5
| * | | | | | | Removing sensitive properties from ProjectTypeLuke Duncalfe2019-02-201-2/+0
| * | | | | | | Prevent leaking of private repo data through APILuke Duncalfe2019-02-204-20/+80
* | | | | | | | Merge branch 'security-fj-diff-import-file-read-fix-11-8' into '11-8-stable'Yorick Peterse2019-02-2710-4/+103
|\ \ \ \ \ \ \ \
| * | | | | | | | Arbitrary file read via MergeRequestDiffFrancisco Javier López2019-02-2710-4/+103
|/ / / / / / / /
* | | | | | | | Merge branch '11-8-security-2799-emails' into '11-8-stable'Yorick Peterse2019-02-275-17/+60
|\ \ \ \ \ \ \ \
| * | | | | | | | Remove link after issue move when no permissionsJarka Košanová2019-02-225-17/+60
| | |_|_|_|_|_|/ | |/| | | | | |
* | | | | | | | Merge branch 'security-kubernetes-local-ssrf-11-8' into '11-8-stable'Yorick Peterse2019-02-275-1/+60
|\ \ \ \ \ \ \ \
| * | | | | | | | Do not allow local urls in Kubernetes formThong Kuah2019-02-215-1/+60
* | | | | | | | | Merge branch 'security-add-public-internal-groups-as-members-to-your-project-...Yorick Peterse2019-02-2710-13/+85
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Change policy regarding group visibilityMałgorzata Ksionek2019-02-2010-13/+85
| | |_|/ / / / / / | |/| | | | | | |
* | | | | | | | | Merge branch 'security-osw-stop-linking-to-packages-11-8' into '11-8-stable'Yorick Peterse2019-02-2720-51/+207
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Add changelogOswaldo Ferreira2019-02-261-0/+5
| * | | | | | | | | Raise not implemented error on BaseLinker for package_urlOswaldo Ferreira2019-02-251-0/+4
| * | | | | | | | | Stop linking to unrecognized package sourcesOswaldo Ferreira2019-02-2419-51/+198
| | |_|/ / / / / / | |/| | | | | | |
* | | | | | | | | Merge branch 'security-issue_54789_2-11-8' into '11-8-stable'Yorick Peterse2019-02-273-0/+44
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Prevent disclosing project milestone titlesFelipe Artur2019-02-253-0/+44
| |/ / / / / / / /
* | | | | | | | | Merge branch 'security-mermaid-11-8' into '11-8-stable'Yorick Peterse2019-02-273-0/+27
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | |
| * | | | | | | | Limit number of characters allowed in mermaidjsRajat Jain2019-02-273-0/+27
| | |/ / / / / / | |/| | | | | |
View Lorry Controller Status