| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| |\
| |
| |
| |
| | |
Document the Admin Area's *Gitaly Servers* page
See merge request gitlab-org/gitlab-ce!28987
|
| |/ |
|
| |\
| |
| |
| |
| | |
VERSION file should be 12.0, not 11.12
See merge request gitlab-org/gitlab-ce!29092
|
| | |
| |
| |
| |
| | |
This was apparently causing Gitlab.version_info to return the wrong
values, causing the wrong images to be loaded via CI_SERVER_VERSION.
|
| |\ \
| | |
| | |
| | |
| | | |
Edited signup restrictions for SSOT guidelines
See merge request gitlab-org/gitlab-ce!29049
|
| |/ / |
|
| |\ \
| | |
| | |
| | |
| | | |
Fix markdown parsing for doc page
See merge request gitlab-org/gitlab-ce!29056
|
| | | |
| | |
| | |
| | |
| | | |
The lack of indentatioin is causing the markdown parser to get confused
and formating it wrong.
|
| |\ \ \
| | | |
| | | |
| | | |
| | | | |
Snippets API doc fixes: content->code; visibility is required
See merge request gitlab-org/gitlab-ce!28571
|
| |/ / /
| | |
| | |
| | |
| | | |
Currently, the field used to fill the contents is called "code".
Also "visibility" is now required.
|
| |\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Fix project settings not being able to update
Closes #62708
See merge request gitlab-org/gitlab-ce!29097
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Previously import_url would always be present in the update parameters,
which would cause the validation to fail. We now only include this
parameter only if there is URL given.
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62708
|
| |\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Edit *Instance template repository* for SSOT epic
See merge request gitlab-org/gitlab-ce!29032
|
| |/ / / / |
|
| |\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Use /bin/herokuish in Auto DevOps docs examples
See merge request gitlab-org/gitlab-ce!28974
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The previous examples did work however they had a problem when the
bin/setup script installed a different bundler version than the one in
your Gemfile.lock. It is safer to use `/bin/herokuish procfile exec` to
get access to all the environment already installed for your application
instead of installing bundler again.
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
CE Backport of !13803: "Fix all `no-implicit-coercion` ESLint violations
See merge request gitlab-org/gitlab-ce!29007
|
| |/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This commit is the result of running `yarn eslint --fix` after enabling
the `no-implicit-coercion` ESLint rule. This rule has been added to
our ESLint config here:
https://gitlab.com/gitlab-org/gitlab-eslint-config/merge_requests/14
|
| |\ \ \ \ \
| |_|/ / /
|/| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Backporting EE fix
Closes #61264
See merge request gitlab-org/gitlab-ce!29004
|
| |/ / / / |
|
| |\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Move boardsStore.moving to BoardList component
See merge request gitlab-org/gitlab-ce!29076
|
| |/ / / / |
|
| |\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Clarify "support" to mean GitLab.com integration
See merge request gitlab-org/gitlab-ce!29091
|
| |/ / / / |
|
| |\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Log out in after all hook
See merge request gitlab-org/gitlab-ce!28969
|
| | | | | |
| | | | |
| | | | |
| | | | | |
So subsequent tests can successfully log in
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Add activerecord-explain-analyze gem
See merge request gitlab-org/gitlab-ce!29051
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
This gem allows you to get the `EXPLAIN ANALYZE` query plan, directly
from the Rails console.
The gem is installed with `require: false`, but if it was loaded on
launch, this would be it's memory load:
```
TOP: 145.3086 MiB
rails/all: 22.4844 MiB
...
activerecord-explain-analyze: 2.9648 MiB
active_record/connection_adapters/postgresql_adapter: 2.9648 MiB
pg: 2.9648 MiB
pg_ext: 2.9648 MiB
...
```
|
| |\ \ \ \ \ \
| |/ / / / /
|/| | | | |
| | | | | |
| | | | | | |
Backport EE MR
See merge request gitlab-org/gitlab-ce!29066
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | | |
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/13913
|
| |\ \ \ \ \ \
| |_|_|_|_|/
|/| | | | |
| | | | | |
| | | | | | |
Update architecture.md to fix typo in GitLabMonito -> GitLabMonitor
See merge request gitlab-org/gitlab-ce!28955
|
| |/ / / / / |
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Reconcile CE and EE differences in members/_member.html.haml
See merge request gitlab-org/gitlab-ce!29021
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | | |
This file conflicts quite frequently with any changes in the file.
|
| |\ \ \ \ \ \
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Stop two-step rebase from hanging when errors occur
Closes #62353
See merge request gitlab-org/gitlab-ce!29068
|
| |/ / / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
This change makes sure Gitaly includes a fix to make rebase work again
properly.
Part of: https://gitlab.com/gitlab-org/gitlab-ce/issues/62353
|
| |\ \ \ \ \ \ |
|
| | |\ \ \ \ \ \
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Reject slug+uri concat if slug is deemed unsafe
See merge request gitlab/gitlabhq!3108
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
First reported:
https://gitlab.com/gitlab-org/gitlab-ce/issues/60143
When the page slug is "javascript:" and we attempt to link to a relative
path (using `.` or `..`) the code will concatenate the slug and the uri.
This MR adds a guard to that concat step that will return `nil` if the
incoming slug matches against any of the "unsafe" slug regexes;
currently this is only for the slug "javascript:" but can be extended if
needed. Manually tested against a non-exhaustive list from OWASP of
common javascript XSS exploits that have to to with mangling the
"javascript:" method, and all are caught by this change or by existing
code that ingests the user-specified slug.
|
| | |\ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Persistent XSS in note objects CE
See merge request gitlab/gitlabhq!3075
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
| | | | | | | | | | |
|
