Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Improve documentation of SSRF protection | Francisco Javier López | 2018-04-24 | 2 | -3/+10 |
| | |||||
* | Update rack attack docs | Cindy Pallares 🦉 | 2018-01-23 | 1 | -13/+123 |
| | |||||
* | Exclude comments from specific docs | Achilleas Pipinellis | 2017-11-01 | 1 | -0/+4 |
| | |||||
* | More review comments | Nick Thomas | 2017-08-30 | 1 | -0/+0 |
| | |||||
* | Address review comments | Nick Thomas | 2017-08-30 | 2 | -4/+5 |
| | |||||
* | Rework the permissions model for SSH key restrictions | Nick Thomas | 2017-08-30 | 1 | -0/+0 |
| | | | | | | | | | | | | | | | `allowed_key_types` is removed and the `minimum_<type>_bits` fields are renamed to `<tech>_key_restriction`. A special sentinel value (`-1`) signifies that the key type is disabled. This also feeds through to the UI - checkboxes per key type are out, inline selection of "forbidden" and "allowed" (i.e., no restrictions) are in. As with the previous model, unknown key types are disallowed, even if the underlying ssh daemon happens to support them. The defaults have also been changed from the lowest known bit size to "no restriction". So if someone does happen to have a 768-bit RSA key, it will continue to work on upgrade, at least until the administrator restricts them. | ||||
* | Add settings for minimum key strength and allowed key type | Nick Thomas | 2017-08-30 | 3 | -0/+19 |
| | | | | | | | | This is an amalgamation of: * Cory Hinshaw: Initial implementation !5552 * Rémy Coutable: Updates !9350 * Nick Thomas: Resolve conflicts and add ED25519 support !13712 | ||||
* | Support 2FA requirement per-group | Markus Koller | 2017-04-06 | 2 | -1/+16 |
| | |||||
* | Move webhooks to new a location under Integrations | Achilleas Pipinellis | 2017-02-03 | 1 | -2/+2 |
| | |||||
* | Reduce size of images from 25MB to 13MB using pngquant | Achilleas Pipinellis | 2016-11-22 | 1 | -0/+0 |
| | | | | | | Took it from https://gitlab.com/gitlab-com/www-gitlab-com/merge_requests/3232 [ci skip] | ||||
* | optimize png images losslessly using zopflipng | Peter Dave Hello | 2016-06-29 | 1 | -0/+0 |
| | |||||
* | Change landing page when skipping confirmation email and add documentation | Felipe Artur | 2016-05-16 | 2 | -0/+8 |
| | |||||
* | Use relative links in `doc`, fix broken generated HTML links | Anatoly Borodin | 2016-03-17 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | Links like (doc/web_hooks/web_hooks.md) work in the GitLab source code web interface, but the HTML generator produces broken links in the `doc` subdirectories: http://doc.gitlab.com/ce/hooks/doc/web_hooks/web_hooks.html instead of the right one http://doc.gitlab.com/ce/web_hooks/web_hooks.html in http://doc.gitlab.com/ce/hooks/custom_hooks.html. Fixes #14338 [ci skip] Signed-off-by: Anatoly Borodin <anatoly.borodin@gmail.com> | ||||
* | web hooks to webhooks | ashleys | 2016-03-10 | 2 | -7/+7 |
| | |||||
* | Make "Two-factor" casing consistent throughout the applicationrs-two-factor-casing | Robert Speicher | 2016-01-31 | 1 | -1/+1 |
| | |||||
* | Add image to 2fa security documentation | Achilleas Pipinellis | 2016-01-22 | 2 | -4/+11 |
| | | | | [ci skip] | ||||
* | Clean up CRIME security doc [ci skip] | Achilleas Pipinellis | 2015-12-25 | 1 | -37/+41 |
| | |||||
* | Merge branch 'master' into adding_crime_security | Achilleas Pipinellis | 2015-12-25 | 2 | -0/+39 |
|\ | |||||
| * | Fixed codestyle and added 2FA documentationfeature/force-tfa | Gabriel Mazetto | 2015-12-24 | 2 | -0/+39 |
| | | |||||
* | | Adding how we manage CRIME vulnerability to security docs [ci skip]adding_crime_security | Jose Torres | 2015-12-19 | 2 | -0/+60 |
|/ | |||||
* | Document file upload random uuid security | Drew Blessing | 2015-12-10 | 2 | -1/+13 |
| | |||||
* | make it more obvious what happens in the code | Job van der Voort | 2015-05-08 | 1 | -4/+4 |
| | |||||
* | remove redundant colon | Job van der Voort | 2015-05-08 | 1 | -1/+1 |
| | |||||
* | Deleted > and commented "or" out | Karen Carias | 2015-05-07 | 1 | -5/+9 |
| | |||||
* | Added link to root password doc correctly | Karen Carias | 2015-05-07 | 1 | -0/+1 |
| | |||||
* | New file to add to security documentation, "How to reset your root password" | Karen Carias | 2015-04-28 | 1 | -0/+36 |
| | |||||
* | Add doc on "Web Hooks and insecure internal web services". | Douwe Maan | 2015-02-07 | 2 | -0/+14 |
| | |||||
* | Fix a number of discovered typos, capitalization of developer and | Ewan Edwards | 2015-02-03 | 1 | -1/+1 |
| | | | | product names, plus a couple of instances of bad Markdown markup. | ||||
* | Add explanation about unintentional sharing. | Sytse Sijbrandij | 2014-09-18 | 1 | -0/+1 |
| | |||||
* | Add information on information exclusivity. | Sytse Sijbrandij | 2014-09-18 | 2 | -0/+9 |
| | |||||
* | Update docs to markdown style guide. | Ciro Santilli | 2014-06-03 | 3 | -10/+17 |
| | |||||
* | Add titles to doc pages. | Marin Jankovski | 2014-05-27 | 1 | -1/+3 |
| | |||||
* | New doc site needs indexes. | dosire | 2014-03-27 | 1 | -0/+2 |
| | |||||
* | Explain where the default password validation is | Jacob Vosmaer | 2014-01-13 | 1 | -1/+2 |
| | |||||
* | Add instructions for custom password length limits | Jacob Vosmaer | 2014-01-13 | 1 | -0/+9 |
| | |||||
* | Add documentation to help section, rack_attack as example | Marin Jankovski | 2013-09-30 | 1 | -0/+19 |