summaryrefslogtreecommitdiff
path: root/app
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'security-master-secret-ci-variables-exposed' into 'master'John Jarvis2019-01-025-14/+53
|\
| * Support merge_request pipeline ref typesMatija Čupić2018-12-081-7/+3
| * Check resolved_ref before checking if protectedMatija Čupić2018-12-081-1/+2
| * Conditionally assign ref_name for more efficiencyMatija Čupić2018-12-081-1/+5
| * Add specs when full ref is passed to protected_forMatija Čupić2018-12-081-1/+1
| * Remove resolving conditional from protected_forMatija Čupić2018-12-081-7/+2
| * Raise an error on ambiguous refsMatija Čupić2018-12-082-1/+3
| * Rename Repository#resolve_ref to expand_refMatija Čupić2018-12-082-9/+8
| * Make full ref in Repository#resolve_ref explicitMatija Čupić2018-12-081-1/+1
| * Simplify conditionals in Project#protected_ref?Matija Čupić2018-12-081-2/+6
| * Implement Repository#ambiguous_ref?Matija Čupić2018-12-082-10/+9
| * Move Project#resolve_ref to RepositoryMatija Čupić2018-12-082-16/+16
| * Remove Repository#find_refMatija Čupić2018-12-081-10/+0
| * Use strings instead of Gitlab::Git::RefMatija Čupić2018-12-081-8/+9
| * Remove Gitlab::Git::Ref#full_refMatija Čupić2018-12-081-7/+5
| * Use nil instead of raising AmbiguousRefMatija Čupić2018-12-081-2/+3
| * Use Gitlab::Git::Ref in Project#resolve_refMatija Čupić2018-12-082-5/+16
| * Make HasRef#git_ref publicMatija Čupić2018-12-081-4/+0
| * Use full ref when possible to avoid ambiguityMatija Čupić2018-12-083-3/+26
| * Support both ref and ref-name in protected_for?Matija Čupić2018-12-081-4/+23
* | Merge branch 'security-todos_not_redacted_for_guests' into 'master'John Jarvis2019-01-027-11/+25
|\ \
| * | Delete confidential issue todos for guestsFelipe Artur2018-12-147-11/+25
* | | Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhqJohn Jarvis2019-01-0113-42/+85
|\ \ \
| * \ \ Merge branch 'security-53543-user-keeps-access-to-mr-issue-when-removed-from-...John Jarvis2019-01-011-1/+1
| |\ \ \
| | * | | Adds validation to check if user can read projectTiago Botelho2018-12-191-1/+1
| * | | | Merge branch 'security-bvl-fix-cross-project-mr-exposure' into 'master'John Jarvis2019-01-011-7/+17
| |\ \ \ \
| | * | | | Validate projects in MR build serviceBob Van Landuyt2018-12-141-7/+17
| * | | | | Merge branch 'security-refs-available-to-project-guest' into 'master'John Jarvis2019-01-011-0/+1
| |\ \ \ \ \
| | * | | | | Project guests no longer are able to see refs pageTiago Botelho2018-12-191-0/+1
| | | |/ / / | | |/| | |
| * | | | | Merge branch 'security-fix-ssrf-import-url-remote-mirror' into 'master'John Jarvis2019-01-012-5/+4
| |\ \ \ \ \
| | * | | | | Replaced UrlValidator with PublicUrlValidator for import_url and remote mirro...Francisco Javier López2018-12-132-5/+4
| * | | | | | Merge branch 'security-48259-private-snippet' into 'master'John Jarvis2019-01-015-11/+22
| |\ \ \ \ \ \
| | * | | | | | Block private snippets from being embeddableMark Chao2018-12-203-7/+18
| | * | | | | | Move embeddable? to model to be used outside viewMark Chao2018-12-203-9/+9
| * | | | | | | Merge branch 'security-54377-label-milestone-name-xss' into 'master'John Jarvis2019-01-011-7/+10
| |\ \ \ \ \ \ \
| | * | | | | | | Escape label and milestone titles to prevent XSSKushal Pandya2018-12-201-7/+10
| | |/ / / / / /
| * | | | | | | Merge branch 'security-fix-ssrf-lfs-project-import' into 'master'John Jarvis2019-01-011-8/+27
| |\ \ \ \ \ \ \
| | * | | | | | | Fixed SSRF in project imports with LFSFrancisco Javier López2018-12-181-8/+27
| * | | | | | | | Merge branch 'security-master-group-cicd-settings-accessible-to-maintainer' i...John Jarvis2019-01-011-3/+3
| |\ \ \ \ \ \ \ \
| | * | | | | | | | Check for group admin permissionsMatija Čupić2018-12-201-3/+3
* | | | | | | | | | Fix commit SHA not showing in merge request compare dropdownStan Hu2018-12-311-1/+1
* | | | | | | | | | Resolve "Status emoji should not update awards section on issue page"Brandon Labuschagne2018-12-311-2/+1
* | | | | | | | | | Merge branch 'ac-releases-api' into 'master'Kamil Trzciński2018-12-3116-79/+240
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | Resolve a Cognitive Complexity of 12Shinya Maeda2018-12-311-12/+18
| * | | | | | | | | | Add spec for Release APIShinya Maeda2018-12-3113-120/+189
| * | | | | | | | | | Add delete method in Release APIShinya Maeda2018-12-311-0/+41
| * | | | | | | | | | Refactor Release servicesAlessio Caiazza2018-12-314-62/+36
| * | | | | | | | | | ReleasesFinder will always return a relationAlessio Caiazza2018-12-312-4/+4
| * | | | | | | | | | Expose assets in releases APIAlessio Caiazza2018-12-311-0/+13
| * | | | | | | | | | Add releases APIAlessio Caiazza2018-12-3111-41/+99
View Lorry Controller Status