summaryrefslogtreecommitdiff
path: root/app
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'security-dns-rebind-ssrf-in-slack-notifications-12-3-ce' into '...GitLab Release Tools Bot2019-11-263-5/+28
|\
| * Use Gitlab::HTTP for all chat notificationsHordur Freyr Yngvason2019-11-043-5/+28
* | Merge branch 'security-33712-ce-12-3' into '12-3-stable'GitLab Release Tools Bot2019-11-262-1/+15
|\ \
| * | Internalize private project minimum access levelMark Chao2019-11-152-12/+13
| * | Fix scope to handle private guest permissionMark Chao2019-11-152-1/+14
* | | Hide AWS secret on Admin Integration pageJustin Ho Tuan Duong2019-11-261-0/+1
* | | Merge branch 'security-ag-cycle-analytics-guest-permissions-12-3' into '12-3-...GitLab Release Tools Bot2019-11-262-2/+8
|\ \ \
| * | | Ensure that summary items remain alignedBrandon Labuschagne2019-11-202-2/+8
| |/ /
* | | Merge branch 'security-filter-related-branches-from-activity-feed-12.3' into ...GitLab Release Tools Bot2019-11-261-1/+14
|\ \ \
| * | | Restrict branches visible to guests in Issue feedKerri Miller2019-11-201-1/+14
| |/ /
* | | Merge branch 'security-2943-encrypt-plaintext-tokens-12-3' into '12-3-stable'GitLab Release Tools Bot2019-11-261-16/+17
|\ \ \
| * | | Encrypt application settings with pre and post deploymentsArturo Herrero2019-11-251-24/+0
| * | | Encrypt application setting tokensArturo Herrero2019-11-211-16/+41
| |/ /
* | | Check permissions before showing a forked project's sourceNick Thomas2019-11-253-21/+22
|/ /
* | Add latest changes from gitlab-org/gitlab@12-3-stable-eeGitLab Bot2019-11-155-2/+20
|/
* Merge branch 'security-65756-ex-admin-attacker-can-comment-in-internal-12-3' ...GitLab Release Tools Bot2019-10-251-0/+1
|\
| * Users without commit access cannot create notescharlieablett2019-10-231-0/+1
* | Return 404 on LFS request if project doesn't existIgor Drozdov2019-10-251-0/+1
* | Merge branch 'security-bvl-validate-force-remove-branch-on-mrs-12-3-ce' into ...GitLab Release Tools Bot2019-10-247-9/+52
|\ \
| * | Only assign merge params when allowedBob Van Landuyt2019-10-247-9/+52
| |/
* | Merge branch 'security-2914-labels-visible-despite-no-access-to-issues-reposi...GitLab Release Tools Bot2019-10-242-5/+11
|\ \
| * | Backport for CE MREugenia Grieff2019-10-012-5/+11
* | | Merge branch 'security-2920-fix-notes-with-label-cross-reference-12-3' into '...GitLab Release Tools Bot2019-10-242-1/+4
|\ \ \
| * | | 12.3 Backport for CE MREugenia Grieff2019-10-012-1/+4
| |/ /
* | | Merge branch 'security-ag-hide-private-members-in-project-member-autocomplete...GitLab Release Tools Bot2019-10-242-2/+56
|\ \ \
| * | | Pick only those groups that the viewing user has access to,Aakriti Gupta2019-09-252-2/+56
* | | | Merge branch 'security-remove-leaky-401-responses-12.3' into '12-3-stable'GitLab Release Tools Bot2019-10-241-2/+4
|\ \ \ \
| * | | | Avoid #authenticate_user! in #route_not_foundKerri Miller2019-10-091-2/+4
| | |_|/ | |/| |
* | | | Merge branch 'security-mask-sentry-token-12-3-ce' into '12-3-stable'GitLab Release Tools Bot2019-10-243-4/+13
|\ \ \ \
| * | | | Mask Sentry auth tokenRyan Cobb2019-10-163-4/+13
| |/ / /
* | | | Merge branch 'security-64519-circular-graphql-queries-12-3' into '12-3-stable'GitLab Release Tools Bot2019-10-241-5/+5
|\ \ \ \
| * | | | Check for recursion and fail if too recursivecharlieablett2019-10-081-5/+5
| |/ / /
* | | | Merge branch 'security-stored-xss-using-find-file-12-3' into '12-3-stable'GitLab Release Tools Bot2019-10-241-1/+2
|\ \ \ \
| * | | | Sanitize search text to prevent XSSsamantha-dev2019-10-101-1/+2
| |/ / /
* | | | Merge branch 'security-developer-transfer-project-12-3' into '12-3-stable'GitLab Release Tools Bot2019-10-243-1/+5
|\ \ \ \
| * | | | Require maintainer permission to transfer projectsmanojmj2019-10-113-1/+5
| |/ / /
* | | | Merge branch 'security-open-redirect-internalredirect-12-3' into '12-3-stable'GitLab Release Tools Bot2019-10-241-1/+1
|\ \ \ \
| * | | | Use the '\A' and '\z' regex anchors in `InternalRedirect` to mitigate an Open...Joern Schneeweisz2019-10-141-1/+1
| |/ / /
* | | | Merge branch 'security-wiki-rdoc-content-12-3-ce' into '12-3-stable'GitLab Release Tools Bot2019-10-242-9/+7
|\ \ \ \
| * | | | Pass all wiki markup formats through pipelinesLuke Duncalfe2019-10-172-9/+7
| |/ / /
* | | | Handle Stored XSS for Grafana URL in settingsDavid Wilkins2019-10-242-2/+22
* | | | Add #to_ability_name to Project & MilestoneDylan Griffith2019-10-232-0/+8
* | | | Change Note#to_ability_name to 'note'Dylan Griffith2019-10-234-2/+7
|/ / /
* | | EE port: Fix private feature Elasticsearch leakMark Chao2019-10-012-2/+8
| |/ |/|
* | Merge branch 'security-bypass-email-verification-using-salesforce' into '12-3...GitLab Release Tools Bot2019-09-261-1/+17
|\ \
| * | Add checking for email_verified keyMałgorzata Ksionek2019-09-231-1/+17
* | | Merge branch 'security-sarcila-verify-saml-request-origin-12-3' into '12-3-st...GitLab Release Tools Bot2019-09-261-2/+7
|\ \ \
| * | | Validate that SAML requests are originated from gitlabSebastian Arcila Valenzuela2019-09-201-2/+7
| |/ /
* | | Merge branch 'security-mermaid-block' into '12-3-stable'GitLab Release Tools Bot2019-09-261-1/+4
|\ \ \
| * | | Only render fixed number of mermaid blocksRajat Jain2019-09-131-1/+4
View Lorry Controller Status