summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Rename clearDetailIssue() to clearIssueDetail()winh-issue-boards-clearIssueDetailWinnie Hellmann2019-06-036-10/+10
|
* Merge branch 'issafeurl-utility' into 'master'Kushal Pandya2019-06-032-0/+120
|\ | | | | | | | | Add global isSafeURL utility See merge request gitlab-org/gitlab-ce!28943
| * Add global isSafeURL utilityissafeurl-utilityPaul Gascou-Vaillancourt2019-06-032-0/+120
| | | | | | | | | | | | | | | | - Added isSafeURL utility based on prior work in gitlab-ee - Also added isAbsoluteOrRootRelative() and getBaseURL() utils, needed by isSafeURL - Removed URL() fallback because URL() is now polyfilled - Updated specs
* | Merge branch 'winh-notes-app-jest' into 'master'Clement Ho2019-06-035-109/+114
|\ \ | | | | | | | | | | | | | | | | | | Move NoteApp tests to Jest Closes #62399 See merge request gitlab-org/gitlab-ce!28903
| * | Move NoteApp tests to JestWinnie Hellmann2019-06-035-109/+114
|/ /
* | Merge branch ↵Clement Ho2019-06-032-1/+6
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | '62092-missing-padding-next-to-time-windows-dropdown-on-metrics-dashboard' into 'master' Added padding to time window dropdown in monitor dashboard Closes #62092 See merge request gitlab-org/gitlab-ce!28897
| * | Added padding to time window dropdown in monitor dashboardDhiraj Bodicherla2019-06-032-1/+6
|/ /
* | Merge dev.gitlab.org master into GitLab.com masterYorick Peterse2019-06-0377-171/+1275
|\ \
| * \ Merge branch 'security-jej/prevent-web-sign-in-bypass' into 'master'GitLab Release Tools Bot2019-06-033-1/+47
| |\ \ | | | | | | | | | | | | | | | | Prevent password sign in restriction bypass See merge request gitlab/gitlabhq!2702
| | * | Prevent password sign in restriction bypassJames Edwards-Jones2019-05-213-1/+47
| | | |
| * | | Merge branch 'security-fix_milestones_search_api_leak' into 'master'GitLab Release Tools Bot2019-06-037-7/+131
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Resolve: Milestones leaked via search API Closes #2822 See merge request gitlab/gitlabhq!2997
| | * | | Resolve: Milestones leaked via search APIFelipe Artur2019-05-207-7/+131
| | | | | | | | | | | | | | | | | | | | | | | | | Fix milestone titles being leaked using search API when users cannot read milestones
| * | | | Merge branch 'security-60039' into 'master'GitLab Release Tools Bot2019-06-038-33/+144
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Disallow invalid MR branch name See merge request gitlab/gitlabhq!3052
| | * | | | Refactor spec to not use truthy or falseyMark Chao2019-05-031-58/+58
| | | | | |
| | * | | | Use full ref when creating MR pipeline in specsMark Chao2019-05-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Continuation of 426488b7218e85ce69868ae4628801af2322b74a
| | * | | | Validate MR branch namesMark Chao2019-05-037-30/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Prevents refspec as branch name, which would bypass branch protection when used in conjunction with rebase. HEAD seems to be a special case with lots of occurrence, so it is considered valid for now. Another special case is `refs/head/*`, which can be imported.
| * | | | | Merge branch 'security-id-leaked-password-in-import-url-frontend' into 'master'GitLab Release Tools Bot2019-06-0311-11/+166
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Handling password on import by url page See merge request gitlab/gitlabhq!3061
| | * | | | | Handling password on import by url pageSam Bigelow2019-05-294-23/+24
| | | | | | |
| | * | | | | Hide password on import by url formIgor Drozdov2019-05-2911-7/+161
| | | | | | |
| * | | | | | Merge branch 'dm-http-hostname-override' into 'master'GitLab Release Tools Bot2019-06-0338-92/+587
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Protect Gitlab::HTTP against DNS rebinding attack See merge request gitlab/gitlabhq!3071
| | * | | | | | Add DNS rebinding protection settingsOswaldo Ferreira2019-05-3013-13/+179
| | | | | | | |
| | * | | | | | Protect Gitlab::HTTP against DNS rebinding attackDouwe Maan2019-05-3029-90/+419
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Gitlab::HTTP now resolves the hostname only once, verifies the IP is not blocked, and then uses the same IP to perform the actual request, while passing the original hostname in the `Host` header and SSL SNI field.
| * | | | | | | Merge branch 'security-fix-project-existence-disclosure-master' into 'master'GitLab Release Tools Bot2019-06-033-16/+28
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix url redaction for issue links See merge request gitlab/gitlabhq!3091
| | * | | | | | | Fix url redaction for issue linksPatrick Derichs2019-05-033-16/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add changelog entry Add missing href to all redactor specs and removed href assignment Remove obsolete spec If original_content is given, it should be used for link content
| * | | | | | | | Merge branch 'security-unsubscribing-from-issue' into 'master'GitLab Release Tools Bot2019-06-034-11/+109
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hide issue title on unsubscribe for anonymous users See merge request gitlab/gitlabhq!3097
| | * | | | | | | | Hide issue title on unsubscribe for anonymous usersAlexandru Croitor2019-05-164-11/+109
| | | | | | | | | |
| * | | | | | | | | Merge branch 'security-fix-confidential-issue-label-visibility-master' into ↵GitLab Release Tools Bot2019-06-033-1/+46
| |\ \ \ \ \ \ \ \ \ | | |_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'master' Fix confidential issue label disclosure on milestone view See merge request gitlab/gitlabhq!3098
| | * | | | | | | | Fix confidential issue label disclosure on milestone viewPatrick Derichs2019-05-143-1/+46
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add changelog entry Method should be public Use milestonish method Use render data to filter labels Add specs for label visibility on milestone
| * | | | | | | | | Update CHANGELOG.md for 11.9.12GitLab Release Tools Bot2019-05-301-0/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ci skip]
* | | | | | | | | | Merge branch 'update-pages' into 'master'Douglas Barbosa Alexandre2019-06-032-1/+6
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update GitLab Pages to v1.6.0 See merge request gitlab-org/gitlab-ce!29048
| * | | | | | | | | | Update GitLab Pages to v1.6.0Nick Thomas2019-06-032-1/+6
| | | | | | | | | | |
* | | | | | | | | | | Merge branch 'ac-graphql-stats' into 'master'Dmitriy Zaporozhets2019-06-0320-5/+362
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add Namespace and ProjectStatistics to GraphQL API See merge request gitlab-org/gitlab-ce!28277
| * | | | | | | | | | | Add Namespace and ProjectStatistics to GraphQL APIAlessio Caiazza2019-06-0320-5/+362
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We can query namespaces, and nested projects. Projects now exposes statistics
* | | | | | | | | | | | Merge branch 'issue/51022' into 'master'Annabel Dunstone Gray2019-06-034-3/+8
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | added `dropdown-extended-height` class to labels dropdown-menu See merge request gitlab-org/gitlab-ce!28659
| * | | | | | | | | | | | Add `dropdown-extended-height` class to labels dropdownMichel Engelen2019-06-034-3/+8
|/ / / / / / / / / / / /
* | | | | | | | | | | | Merge branch 'abstract-auto-merge' into 'master'Kamil Trzciński2019-06-0337-187/+490
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactor and abstract Auto Merge Processes See merge request gitlab-org/gitlab-ce!28595
| * | | | | | | | | | | | Fix frontend tests related to autoMergeStrategyabstract-auto-mergeNathan Friend2019-06-037-23/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A few minor frontend changes to complete the refactoring from MWPS to the more generic autoMergeStrategy.
| * | | | | | | | | | | | Abstract auto merge processesShinya Maeda2019-06-0335-175/+478
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We have one auto merge strategy today - Merge When Pipeline Succeeds. In order to add more strategies for Merge Train feature, we abstract the architecture to be more extensible. Removed arguments Fix spec
* | | | | | | | | | | | | Merge branch '11759-api-dependencies-list-mvc' into 'master'Sean McGivern2019-06-031-0/+422
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add dependency_list report fixture See merge request gitlab-org/gitlab-ce!29025
| * | | | | | | | | | | | | Add dependency_list report fixtureTetiana Chupryna2019-06-031-0/+422
|/ / / / / / / / / / / / /
* | | | | | | | | | | | | Merge branch 'ce-fj-11886-fix-port-validation' into 'master'Kamil Trzciński2019-06-033-1/+14
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix port validations in .gitlab-webide.yml See merge request gitlab-org/gitlab-ce!29016
| * | | | | | | | | | | | | Fix port validations in .gitlab-webide.ymlce-fj-11886-fix-port-validationFrancisco Javier López2019-06-013-1/+14
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge branch 'qa-review-knapsack' into 'master'Rémy Coutable2019-06-038-1/+100
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [CE] Run review-qa-all in parallel See merge request gitlab-org/gitlab-ce!28283
| * | | | | | | | | | | | | | Generate knapsack report for review-qa-allMark Lapierre2019-06-038-1/+100
|/ / / / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add knapsack qa report and use it to run tests in parallel Use the RSpec runner with knapsack The way the Knapsack runner uses exec to start rspec seems incompatible with the way we expect it to work. Plus, it requires specifying KNAPSACK_TEST_DIR. Instead, we use knapsacks AllocatorBuilder to select the spec files to run, and then start rspec as normal, via RSpec::Core::Runner.run This also means we can incorporate tags. Let the job run automatically Include KNAPSACK_TEST_FILE_PATTERN in vars Check all defined knapsack env vars before requiring knapsack
* | | | | | | | | | | | | | Merge branch 'sh-fix-issue-58714' into 'master'Yorick Peterse2019-06-033-1/+7
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix migration failure when groups are missing route Closes #58714 See merge request gitlab-org/gitlab-ce!29022
| * | | | | | | | | | | | | Fix migration failure when groups are missing routesh-fix-issue-58714Stan Hu2019-06-013-1/+7
| |/ / / / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a Group is missing a route, the migration failed previously with a `Invalid single-table inheritance type` error. To fix this, we can disable STI for the migration class because we don't need to know about the type to do this migration. Besides, currently Group is the only type used in the type column. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/58714
* | | | | | | | | | | | | Merge branch 'fix-search-dropdown-blur-close' into 'master'Filipa Lacerda2019-06-034-2/+21
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix search dropdown not closing on blur if empty Closes #53741 See merge request gitlab-org/gitlab-ce!28730
| * | | | | | | | | | | | | Fix search dropdown not closing on blur if emptyfix-search-dropdown-blur-closeLuke Bennett2019-05-314-2/+21
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge branch '59854-fix-forms-stylint-issues' into 'master'Filipa Lacerda2019-06-033-106/+61
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix style-lint errors and warnings for `app/assets/stylesheets/framework/forms.scss` Closes #59854 See merge request gitlab-org/gitlab-ce!28129
| * | | | | | | | | | | | | | Remove responsive column classes for sm screens59854-fix-forms-stylint-issuesEnrique Alcantara2019-05-302-38/+38
| | | | | | | | | | | | | | |