summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-31106-2346/+1403
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-319-11/+113
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3155-632/+1054
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3141-632/+877
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3174-1032/+1048
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-319-121/+114
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-312-0/+9
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3119-546/+530
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3049-310/+520
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-30112-156/+2337
* Merge dev.gitlab.org@master into GitLab.com@masterYorick Peterse2019-10-3089-157/+1285
|\
| * Merge branch 'security-ag-hide-private-members-in-project-member-autocomplete...GitLab Release Tools Bot2019-10-296-18/+186
| |\
| | * Pick only those groups that the viewing user has access to,Aakriti Gupta2019-09-256-18/+186
| * | Merge branch 'security-64519-nested-graphql-query-can-cause-denial-of-service...GitLab Release Tools Bot2019-10-298-12/+254
| |\ \
| | * | Tweak test to insulate against magic number changescharlieablett2019-10-231-0/+1
| | * | Allow tests to ignore recursioncharlieablett2019-10-232-1/+10
| | * | Check for recursion and fail if too recursivecharlieablett2019-10-238-12/+244
| * | | Merge branch 'security-65756-ex-admin-attacker-can-comment-in-internal' into ...GitLab Release Tools Bot2019-10-293-12/+42
| |\ \ \
| | * | | Improper access control allows the attacker to comment in internal commit aft...Charlie Ablett2019-10-293-12/+42
| |/ / /
| * | | Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-reposi...GitLab Release Tools Bot2019-10-296-8/+102
| |\ \ \
| | * | | Fix labels finder to filter visible issuablesEugenia Grieff2019-10-226-8/+102
| * | | | Merge branch 'security-2920-fix-notes-with-label-cross-reference' into 'master'GitLab Release Tools Bot2019-10-294-1/+66
| |\ \ \ \
| | * | | | Add specs to cover label and milestone notesEugenia Grieff2019-10-241-0/+57
| | * | | | Add milestone and label note types to cross refsEugenia Grieff2019-10-233-1/+9
| * | | | | Merge branch 'security-developer-transfer-project' into 'master'GitLab Release Tools Bot2019-10-298-2/+128
| |\ \ \ \ \
| | * | | | | Require maintainer permission to transfer projectsmanojmj2019-10-098-2/+128
| * | | | | | Merge branch 'security-stored-xss-using-find-file' into 'master'GitLab Release Tools Bot2019-10-293-13/+32
| |\ \ \ \ \ \
| | * | | | | | Sanitize search text to prevent XSSsamantha-dev2019-10-023-13/+32
| * | | | | | | Merge branch 'security-remove-leaky-401-responses-master' into 'master'GitLab Release Tools Bot2019-10-2912-17/+41
| |\ \ \ \ \ \ \
| | * | | | | | | Avoid #authenticate_user! in #route_not_foundKerri Miller2019-10-0912-17/+41
| | | |/ / / / / | | |/| | | | |
| * | | | | | | Merge branch 'security-bvl-validate-force-remove-branch-on-mrs-ce' into 'master'GitLab Release Tools Bot2019-10-2914-14/+191
| |\ \ \ \ \ \ \
| | * | | | | | | Only assign merge params when allowedBob Van Landuyt2019-10-2414-14/+191
| * | | | | | | | Merge branch 'security-wiki-rdoc-content-ce' into 'master'GitLab Release Tools Bot2019-10-296-44/+74
| |\ \ \ \ \ \ \ \
| | * | | | | | | | Pass all wiki markup formats through pipelinesLuke Duncalfe2019-10-236-44/+74
| * | | | | | | | | Merge branch 'security-mask-sentry-token-ce' into 'master'GitLab Release Tools Bot2019-10-296-4/+51
| |\ \ \ \ \ \ \ \ \
| | * | | | | | | | | Mask Sentry auth tokenRyan Cobb2019-10-166-4/+51
| | | |_|/ / / / / / | | |/| | | | | | |
| * | | | | | | | | Merge branch 'security-open-redirect-internalredirect' into 'master'GitLab Release Tools Bot2019-10-293-2/+8
| |\ \ \ \ \ \ \ \ \
| | * | | | | | | | | Add changelog entryJoern Schneeweisz2019-10-141-0/+5
| | * | | | | | | | | Use the '\A' and '\z' regex anchors in `InternalRedirect` to mitigate an Open...Joern Schneeweisz2019-10-082-2/+3
| | |/ / / / / / / /
| * | | | | | | | | Merge branch 'security-33689-post-filter-search-results-ce' into 'master'GitLab Release Tools Bot2019-10-299-9/+44
| |\ \ \ \ \ \ \ \ \
| | * | | | | | | | | Add #to_ability_name to Project & MilestoneDylan Griffith2019-10-234-0/+24
| | * | | | | | | | | Change Note#to_ability_name to 'note'Dylan Griffith2019-10-235-9/+20
| | | |_|_|_|_|_|/ / | | |/| | | | | | |
| * | | | | | | | | Merge branch 'security-id-fix-disclosure-of-private-repo-names' into 'master'GitLab Release Tools Bot2019-10-293-1/+48
| |\ \ \ \ \ \ \ \ \
| | * | | | | | | | | Return 404 on LFS request if project doesn't existIgor Drozdov2019-10-253-1/+48
| * | | | | | | | | | Update CHANGELOG.md for 12.4.1GitLab Release Tools Bot2019-10-281-0/+18
| |/ / / / / / / / /
* | | | | | | | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3035-67/+603
* | | | | | | | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3051-202/+308
* | | | | | | | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-3031-48/+600
* | | | | | | | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-2923-105/+710
* | | | | | | | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-2976-150/+394