| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Avoid checking the user format in every url validation | Francisco Javier López | 2018-06-11 | 1 | -3/+11 |
| | | |||||
| * | Add validation to webhook and service URLs to ensure they are not blocked ↵ | Francisco Javier López | 2018-06-01 | 5 | -95/+71 |
| | | | | | because of SSRF | ||||
| * | Rename allow_private_networks to allow_local_network | Douwe Maan | 2018-04-02 | 1 | -5/+3 |
| | | |||||
| * | Raise more descriptive errors when URLs are blocked | Douwe Maan | 2018-04-02 | 1 | -2/+4 |
| | | |||||
| * | Adds validators and rack cookie helper | James Edwards-Jones | 2018-04-02 | 2 | -0/+16 |
| | | | | | | These changes are backported from EE, related to SAML settings in https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/4549 | ||||
| * | Add HTTPS-only pages | Rob Watson | 2018-03-22 | 1 | -2/+0 |
| | | | | | Closes #28857 | ||||
| * | Merge branch 'fj-15329-services-callbacks-ssrf' into 'security-10-6' | Douwe Maan | 2018-03-21 | 1 | -1/+1 |
| | | | | | | Server Side Request Forgery in Services and Web Hooks See merge request gitlab/gitlabhq!2337 | ||||
| * | Projects and groups badges API | Francisco Javier López | 2018-03-05 | 1 | -0/+32 |
| | | |||||
| * | Skip variables duplicates validator if variable is already a duplicate | Matija Čupić | 2018-02-22 | 1 | -0/+2 |
| | | |||||
| * | Improve validation message and add changelogmc/fix/project-variables-scope | Kamil Trzciński | 2018-02-14 | 1 | -1/+1 |
| | | |||||
| * | Refactor variable duplicates error message | Matija Čupić | 2018-02-14 | 1 | -1/+1 |
| | | |||||
| * | Add more information in variable_duplicates validator error message | Matija Čupić | 2018-02-13 | 1 | -1/+3 |
| | | |||||
| * | Refactor outer anonymous function into a do block | Matija Čupić | 2018-02-13 | 1 | -1/+3 |
| | | |||||
| * | Disable public send cop in variables duplicates validator | Matija Čupić | 2018-02-13 | 1 | -1/+1 |
| | | |||||
| * | Extend variables_duplicates validator with scope handling | Matija Čupić | 2018-02-13 | 1 | -2/+13 |
| | | |||||
| * | Validate User username only on Namespace, and bubble up appropriately | Douwe Maan | 2018-02-06 | 4 | -28/+1 |
| | | |||||
| * | Second iteration of Move Kubernetes from service to Cluster page | Filipa Lacerda | 2017-12-05 | 1 | -5/+5 |
| | | |||||
| * | Adds Rubocop rule for line break after guard clause | Jacopo | 2017-11-16 | 2 | -0/+2 |
| | | | | | Adds a rubocop rule (with autocorrect) to ensure line break after guard clauses. | ||||
| * | Merge branch 'refactor-clusters' into 'master' | Grzegorz Bizon | 2017-11-06 | 1 | -0/+24 |
| |\ | | | | | | | | | Refactor Clusters to be consisted from GcpProvider and KubernetesPlatform See merge request gitlab-org/gitlab-ce!14879 | ||||
| | * | specs for models. Improved details. | Shinya Maeda | 2017-10-30 | 1 | -1/+1 |
| | | | |||||
| | * | This works | Shinya Maeda | 2017-10-23 | 1 | -0/+24 |
| | | | |||||
| * | | Reallow project paths ending in periodsdm-reallow-project-path-ending-in-period | Douwe Maan | 2017-11-06 | 5 | -53/+91 |
| |/ | |||||
| * | Move the key restriction validation to its own class | Nick Thomas | 2017-08-30 | 1 | -0/+29 |
| | | |||||
| * | Implement ayufan validator2 | Shinya Maeda | 2017-07-06 | 1 | -0/+13 |
| | | |||||
| * | Implement ayufan validator | Shinya Maeda | 2017-07-06 | 1 | -37/+0 |
| | | |||||
| * | Revert "Implement Ci::NestedUniquenessValidator" | Shinya Maeda | 2017-07-06 | 1 | -0/+37 |
| | | | | | This reverts commit 8f0a2b6d780347a5ce258ac1a6a6902ce9695ca1. | ||||
| * | Implement Ci::NestedUniquenessValidator | Shinya Maeda | 2017-07-05 | 1 | -37/+0 |
| | | |||||
| * | Implement uniqueness_of_in_memory_validator | Shinya Maeda | 2017-07-05 | 1 | -0/+37 |
| | | |||||
| * | Rebuild the dynamic path before validating itbvl-validate-path-update | Bob Van Landuyt | 2017-06-21 | 1 | -1/+1 |
| | | | | | | Otherwise we won't validate updates to the path. Allowing users to change the path to something that's not allowed. | ||||
| * | Rename `Gitlab::Git::EncodingHelper` to `Gitlab::EncodingHelper` | Bob Van Landuyt | 2017-06-01 | 1 | -1/+1 |
| | | |||||
| * | Avoid crash when trying to parse string with invalid UTF-8 sequence | Bob Van Landuyt | 2017-05-30 | 1 | -0/+5 |
| | | |||||
| * | Revert "Remove changes that are not absolutely necessary" | Douwe Maan | 2017-05-24 | 1 | -8/+14 |
| | | | | This reverts commit b0498c176fa134761d899c9b369be12f1ca789c5 | ||||
| * | Remove changes that are not absolutely necessarydm-fix-routes | Douwe Maan | 2017-05-23 | 1 | -14/+8 |
| | | |||||
| * | Fix ambiguous routing issues by teaching router about reserved words | Douwe Maan | 2017-05-23 | 1 | -191/+24 |
| | | |||||
| * | Reject EE reserved namespace paths in CE as wellbvl-reject-ee-namespace-names | Bob Van Landuyt | 2017-05-04 | 1 | -0/+7 |
| | | |||||
| * | Don't validate reserved words if the format doesn't match30272-bvl-reject-more-namespaces | Bob Van Landuyt | 2017-05-02 | 1 | -0/+1 |
| | | | | | | | Because it also won't match the sophisticated format we have for detecting reserved names. We don't want to confuse the user with 2 error messages | ||||
| * | Update comments | Bob Van Landuyt | 2017-05-02 | 1 | -5/+18 |
| | | |||||
| * | Update path validation & specs | Bob Van Landuyt | 2017-05-02 | 1 | -13/+18 |
| | | |||||
| * | Reuse Gitlab::Regex.full_namespace_regex in the DynamicPathValidator | Bob Van Landuyt | 2017-05-02 | 1 | -25/+18 |
| | | |||||
| * | Reject group-routes as names of child namespaces | Bob Van Landuyt | 2017-05-01 | 1 | -18/+71 |
| | | |||||
| * | Reject paths following namespace for paths including 2 `*` | Bob Van Landuyt | 2017-05-01 | 1 | -2/+2 |
| | | | | | | Reject the part following `/*namespace_id/:project_id` for paths containing 2 wildcard parameters | ||||
| * | Allow `graphs` & `refs` project names | Bob Van Landuyt | 2017-05-01 | 1 | -2/+0 |
| | | |||||
| * | Minor style adjustments | Bob Van Landuyt | 2017-05-01 | 1 | -21/+39 |
| | | |||||
| * | Use `%r{}` regexes to avoid having to escape `/` | Bob Van Landuyt | 2017-05-01 | 1 | -1/+1 |
| | | |||||
| * | The dynamic path validator can block out partial paths | Bob Van Landuyt | 2017-05-01 | 1 | -33/+24 |
| | | | | | So we can block `objects` only when it is contained in `info/lfs` or `gitlab-lfs` | ||||
| * | Make path validation case-insensitive | Bob Van Landuyt | 2017-05-01 | 1 | -0/+1 |
| | | |||||
| * | Reject `-` as a path | Bob Van Landuyt | 2017-05-01 | 1 | -0/+1 |
| | | |||||
| * | Rename `NamespaceValidator` to `DynamicPathValidator` | Bob Van Landuyt | 2017-05-01 | 1 | -3/+6 |
| | | | | | This reflects better that it validates paths instead of a namespace model | ||||
| * | Use the namespace validator for validating all paths | Bob Van Landuyt | 2017-05-01 | 1 | -27/+0 |
| | | | | | | Since the namespacevalidator now knows the difference between a top-level and another path, this could all be handled there. | ||||
| * | Check `has_parent?` for determining validation type | Bob Van Landuyt | 2017-05-01 | 1 | -3/+3 |
| | | |||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |