summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix IE11 issue from missing Object.values polyfillfix-group-page-ie11Luke Bennett2019-01-072-0/+6
* Update VERSION to 11.3.14v11.3.1411-3-stableGitLab Release Tools Bot2018-12-201-1/+1
* Update CHANGELOG.md for 11.3.14GitLab Release Tools Bot2018-12-202-5/+7
* Merge branch 'security-import-symlink-11-3' of dev.gitlab.org:gitlab/gitlabhq...John Jarvis2018-12-206-4/+62
* Update VERSION to 11.3.13v11.3.13GitLab Release Tools Bot2018-12-131-1/+1
* Update CHANGELOG.md for 11.3.13GitLab Release Tools Bot2018-12-132-5/+7
* Merge branch 'security-2754-fix-lfs-import-11-3' into 'security-11-3'John Jarvis2018-12-133-0/+20
* Update VERSION to 11.3.12v11.3.12GitLab Release Tools Bot2018-12-061-1/+1
* Update CHANGELOG.md for 11.3.12GitLab Release Tools Bot2018-12-062-5/+7
* Merge branch 'security-54857-fix-templates-path-traversal-11-3' into 'securit...Cindy Pallares2018-12-058-2/+90
* Update VERSION to 11.3.11v11.3.11GitLab Release Tools Bot2018-11-261-1/+1
* Update CHANGELOG.md for 11.3.11GitLab Release Tools Bot2018-11-2634-167/+39
* Merge branch 'security-fix-uri-xss-applications-11-3' into 'security-11-3'Steve Azzopardi2018-11-267-2/+121
|\
| * Resolve reflected XSS in Ouath authorize windowJames Lopez2018-11-267-2/+121
* | Merge branch 'security-11-3-fj-crlf-injection' into 'security-11-3'Steve Azzopardi2018-11-266-42/+122
|\ \
| * | [11.3] Fix CRLF issue in UrlValidatorFrancisco Javier López2018-11-266-42/+122
|/ /
* | Merge branch 'security-182-update-workhorse-11-3' into 'security-11-3'Steve Azzopardi2018-11-263-2/+9
|\ \
| * | Update to gitlab-workhorse 6.1.2Steve Azzopardi2018-11-231-1/+1
| * | Redact sensitive information on workhorse logMark Chao2018-11-053-2/+9
* | | Merge branch 'security-11-3-fix-webhook-ssrf-ipv6' into 'security-11-3'Steve Azzopardi2018-11-263-13/+112
|\ \ \
| * | | Fix SSRF in project integrationsFrancisco Javier López2018-11-123-13/+112
| |/ /
* | | Merge branch 'security-email-change-notification-11-3' into 'security-11-3'Steve Azzopardi2018-11-265-0/+32
|\ \ \
| * | | Provide email notification on email updatesJames Lopez2018-11-125-0/+32
| |/ /
* | | Merge branch 'security-guest-comments-11-3' into 'security-11-3'Steve Azzopardi2018-11-2613-34/+188
|\ \ \ | |_|/ |/| |
| * | [11.3] Fixed ability to comment on and edit/delete comments on locked or conf...Chantal Rollison2018-11-2613-34/+188
|/ /
* | Merge branch 'security-11-3-pages-toctou-race' into 'security-11-3'Steve Azzopardi2018-11-262-1/+7
|\ \
| * | Upgrade GitLab Pages to v1.1.1Alessio Caiazza2018-11-212-1/+7
* | | Merge branch 'security-fix-pat-web-access-11-3' into 'security-11-3'Steve Azzopardi2018-11-2628-277/+538
|\ \ \
| * | | Update code to use API scope on PAT authJames Lopez2018-11-2328-277/+538
| |/ /
* | | Merge branch 'security-11-3-xss-in-markdown-following-unrecognized-html-eleme...Steve Azzopardi2018-11-235-2/+25
|\ \ \
| * | | Sanitize output of SpacedLinkFilterBrett Walker2018-11-165-2/+25
| | |/ | |/|
* | | Merge branch 'security-mermaid-xss-11-3' into 'security-11-3'Steve Azzopardi2018-11-234-1/+21
|\ \ \
| * | | Configure mermaid to not render HTML content in diagramsWinnie Hellmann2018-11-192-0/+8
| * | | Add failing test for XSS in mermaid diagramsWinnie Hellmann2018-11-192-1/+13
| | |/ | |/|
* | | Merge branch 'security-bvl-exposure-in-commits-list-11-3' into 'security-11-3'Steve Azzopardi2018-11-233-55/+67
|\ \ \
| * | | Don't use fragment cache on commit pageBob Van Landuyt2018-11-193-55/+67
| |/ /
* | | Merge branch 'security-issue_51301-11-3' into 'security-11-3'Steve Azzopardi2018-11-236-12/+96
|\ \ \
| * | | Fix milestone promotion authorizationFelipe Artur2018-11-146-12/+96
| | |/ | |/|
* | | Merge branch 'security-2736-prometheus-ssrf-11-3' into 'security-11-3'Steve Azzopardi2018-11-234-3/+25
|\ \ \
| * | | No redirects in prometheus servicerpereira22018-11-144-3/+25
| |/ /
* | | Merge branch 'security-11-3-stored-xss-for-environments' into 'security-11-3'Steve Azzopardi2018-11-237-6/+67
|\ \ \
| * | | Validate URI scheme also for internal URIAlessio Caiazza2018-11-147-6/+67
| |/ /
* | | Merge branch '11-3-stable' into security-11-3Steve Azzopardi2018-11-232-1/+8
|\ \ \
| * | | Update VERSION to 11.3.10v11.3.10GitLab Release Tools Bot2018-11-181-1/+1
| * | | Update CHANGELOG.md for 11.3.10GitLab Release Tools Bot2018-11-182-5/+7
| * | | Merge branch 'sh-fix-issue-54189-11-3' into 'security-11-3'Steve Azzopardi2018-11-183-1/+32
| * | | Merge branch 'security-11-3-2717-xss-username-autocomplete' into 'security-11-3'Steve Azzopardi2018-11-183-10/+39
* | | | Merge branch 'security-private-group-11-3' into 'security-11-3'Steve Azzopardi2018-11-233-0/+26
|\ \ \ \ | |_|_|/ |/| | |
| * | | Fixed read name of private groupsChantal Rollison2018-11-073-0/+26
| | |/ | |/|
* | | Merge branch 'sh-fix-issue-54189-11-3' into 'security-11-3'Steve Azzopardi2018-11-183-1/+32
|\ \ \
View Lorry Controller Status