summaryrefslogtreecommitdiff
path: root/lib/gitlab/sanitizers
Commit message (Collapse)AuthorAgeFilesLines
* Add latest changes from gitlab-org/gitlab@13-12-stable-eev13.12.0-rc42GitLab Bot2021-05-191-1/+1
|
* Add latest changes from gitlab-org/security/gitlab@13-10-stable-eeGitLab Bot2021-04-131-3/+15
|
* Add latest changes from gitlab-org/gitlab@13-7-stable-eev13.7.0-rc42GitLab Bot2020-12-171-1/+1
|
* Add latest changes from gitlab-org/gitlab@13-4-stable-eeGitLab Bot2020-09-191-1/+1
|
* Add latest changes from gitlab-org/gitlab@13-0-stable-eeGitLab Bot2020-05-201-1/+1
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-031-1/+1
|
* Add direct upload support for personal snippetsJan Provaznik2019-08-231-2/+5
|
* Add a rubocop for Rails.loggerMayra Cabrera2019-07-101-1/+1
| | | | | | Suggests to use a JSON structured log instead Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/54102
* Run rubocop -a on CE filessh-upgrade-rubocop-0.68.0-ceStan Hu2019-05-051-1/+1
|
* Rake task for removing exif from uploadsJan Provaznik2019-04-021-0/+156
| | | | | Adds a rake task which can be used for removing EXIF data from existing uploads.
* Enable even more frozen string for lib/gitlabgfyoung2018-11-192-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | Enables frozen string for the following: * lib/gitlab/patch/**/*.rb * lib/gitlab/popen/**/*.rb * lib/gitlab/profiler/**/*.rb * lib/gitlab/project_authorizations/**/*.rb * lib/gitlab/prometheus/**/*.rb * lib/gitlab/query_limiting/**/*.rb * lib/gitlab/quick_actions/**/*.rb * lib/gitlab/redis/**/*.rb * lib/gitlab/request_profiler/**/*.rb * lib/gitlab/search/**/*.rb * lib/gitlab/sherlock/**/*.rb * lib/gitlab/sidekiq_middleware/**/*.rb * lib/gitlab/slash_commands/**/*.rb * lib/gitlab/sql/**/*.rb * lib/gitlab/template/**/*.rb * lib/gitlab/testing/**/*.rb * lib/gitlab/utils/**/*.rb * lib/gitlab/webpack/**/*.rb Partially addresses gitlab-org/gitlab-ce#47424.
* Enable Style/MultilineArrayBraceLayoutDouwe Maan2017-02-231-12/+13
|
* Refactored SVG sanitizerGabriel Mazetto2016-06-121-24/+23
|
* Refactor SVG sanitizer and prevent `xlink:href` to refer to external resourcesGabriel Mazetto2016-06-121-5/+15
|
* Fix SVG whitelisting to allow namespaced attributesGabriel Mazetto2016-06-121-5/+18
|
* Fix warning messages with SVG ALLOWED_ELEMENTSStan Hu2016-05-192-89/+89
| | | | Eliminates "warning: already initialized constant Gitlab::Sanitizers::SVG::ALLOWED_ELEMENTS"
* Update SVG sanitizer to conform to SVG 1.1Stan Hu2016-05-062-0/+144
Use a custom Loofah scrubber since sanitize 2.x transformers are inadequate to handle case-sensitive SVG attributes. sanitize parses documents as HTML instead of XML, which causes all SVG attribute names (e.g. viewBox) to be downcased. * SVG element list: https://www.w3.org/TR/SVG/eltindex.html * SVG attribute list: https://www.w3.org/TR/SVG/attindex.html Closes #14555