summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
...
| | * | | | Move pipeline auth above pipeline assignmentMatija Čupić2018-12-221-1/+1
| | * | | | Authorize read_pipeline before read_buildMatija Čupić2018-12-221-0/+1
| | * | | | Authorize read_build when listing pipeline jobsMatija Čupić2018-12-222-3/+15
| | * | | | Authorize read_build action when listing jobsMatija Čupić2018-12-222-3/+15
| | |/ / /
| * | | | Merge branch 'security-11-5-refs-available-to-project-guest' into 'security-1...John Jarvis2018-12-273-4/+26
| |\ \ \ \
| | * | | | Project guests no longer are able to see refs pageTiago Botelho2018-12-193-4/+26
| | | |/ / | | |/| |
| * | | | Merge branch 'security-11-5-fix-ssrf-lfs-project-import' into 'security-11-5'John Jarvis2018-12-272-17/+77
| |\ \ \ \
| | * | | | Fixed SSRF in project imports with LFSFrancisco Javier López2018-12-182-17/+77
| | |/ / /
| * | | | Merge branch 'security-label-xss-11-5' into 'security-11-5'John Jarvis2018-12-273-1/+28
| |\ \ \ \
| | * | | | Escape html entities when no label foundJarka Košanová2018-12-223-1/+28
| | | |/ / | | |/| |
| * | | | Merge branch 'ensure-that-build-token-is-always-running-11-5' into 'security-...John Jarvis2018-12-277-39/+105
| |\ \ \ \
| | * | | | Ensure that build token is only used when runningKamil Trzciński2018-12-187-39/+105
| * | | | | Merge branch 'security-11-5-fix-ssrf-import-url-remote-mirror' into 'security...John Jarvis2018-12-275-5/+30
| |\ \ \ \ \
| | * | | | | Replaced UrlValidator with PublicUrlValidator for import_url and remote mirro...Francisco Javier López2018-12-135-5/+30
| | | |_|/ / | | |/| | |
| * | | | | Merge branch 'security-11-5-54377-label-milestone-name-xss' into 'security-11-5'John Jarvis2018-12-263-7/+56
| |\ \ \ \ \
| | * | | | | Add changelog entryKushal Pandya2018-12-201-0/+5
| | * | | | | Escape label and milestone titles to prevent XSSKushal Pandya2018-12-202-7/+51
| | |/ / / /
| * | | | | Merge branch 'security-11-5-url-rel' into 'security-11-5'John Jarvis2018-12-263-10/+15
| |\ \ \ \ \
| | * | | | | Set URL rel attribute for broken URLsJan Provaznik2018-12-133-10/+15
| | |/ / / /
| * | | | | Merge branch 'security-todos_not_redacted_for_guests-11-5' into 'security-11-5'John Jarvis2018-12-2614-16/+55
| |\ \ \ \ \
| | * | | | | Delete confidential issue todos for guestsFelipe Artur2018-12-1714-16/+55
| | |/ / / /
| * | | | | Merge branch 'security-bvl-fix-cross-project-mr-exposure-11-5' into 'security...John Jarvis2018-12-264-10/+111
| |\ \ \ \ \ | | |_|_|/ / | |/| | | |
| | * | | | Validate projects in MR build serviceBob Van Landuyt2018-12-144-10/+111
| | |/ / /
| * | | | Merge branch 'security-import-symlink-11-5' into 'security-11-5'John Jarvis2018-12-206-4/+62
| |\ \ \ \ | | |/ / / | |/| | |
| | * | | Update command_line_util.rb to fix rubocopJames Lopez2018-12-181-1/+1
| | * | | Fix persistent symlink in project importJames Lopez2018-12-186-4/+62
| |/ / /
| * | | Merge branch 'security-2754-fix-lfs-import-11-5' into 'security-11-5'John Jarvis2018-12-123-0/+20
| |\ \ \
| | * | | Validate LFS hrefs before downloading themNick Thomas2018-12-123-0/+20
| |/ / /
| * | | Merge remote-tracking branch 'dev/11-5-stable' into security-11-5Nick Thomas2018-12-11118-9255/+103484
| |\ \ \ | | |_|/ | |/| |
| * | | Merge branch 'security-54857-fix-templates-path-traversal-11-5' into 'securit...Cindy Pallares2018-12-058-2/+90
| |\ \ \ | | |_|/ | |/| |
| | * | Prevent a path traversal attack on global file templatesNick Thomas2018-12-058-2/+90
| |/ /
* | | Merge branch '55402-broken-master-karma-test-failing-in-spec-javascripts-boar...Stan Hu2018-12-272-3/+9
* | | Merge branch 'sh-disble-docs-internal-links-lint' into 'master'Clement Ho2018-12-271-1/+2
* | | Update VERSION to 11.5.5v11.5.5GitLab Release Tools Bot2018-12-201-1/+1
* | | Update CHANGELOG.md for 11.5.5GitLab Release Tools Bot2018-12-202-5/+7
* | | Merge branch 'security-import-symlink-11-5' into 'security-11-5'John Jarvis2018-12-206-4/+62
* | | Update VERSION to 11.5.4v11.5.4GitLab Release Tools Bot2018-12-131-1/+1
* | | Update CHANGELOG.md for 11.5.4GitLab Release Tools Bot2018-12-132-5/+7
* | | Merge branch 'security-2754-fix-lfs-import-11-5' into 'security-11-5'John Jarvis2018-12-133-0/+20
| |/ |/|
* | Update VERSION to 11.5.3v11.5.3GitLab Release Tools Bot2018-12-061-1/+1
* | Update CHANGELOG.md for 11.5.3GitLab Release Tools Bot2018-12-062-5/+7
* | Merge branch 'security-54857-fix-templates-path-traversal-11-5' into 'securit...Cindy Pallares2018-12-058-2/+90
* | Update VERSION to 11.5.2v11.5.2GitLab Release Tools Bot2018-12-031-1/+1
* | Update CHANGELOG.md for 11.5.2GitLab Release Tools Bot2018-12-038-35/+16
* | Merge branch '11-5-stable-patch-2' into '11-5-stable'Steve Azzopardi2018-12-03106-9167/+103472
|\ \
| * | Update db/schema.rbSteve Azzopardi2018-12-031-1/+1
| * | Update db/schema.db with latest migrationSteve Azzopardi2018-12-031-1/+1
| * | Remove specification of rails version in migrationSteve Azzopardi2018-12-031-1/+1
| * | Remove `ee` directory for `ce` repoSteve Azzopardi2018-12-031-5/+0
| * | Merge branch '53778-post-deployment-fix' into 'master'Yorick Peterse2018-11-301-0/+0
View Lorry Controller Status