summaryrefslogtreecommitdiff
path: root/lib/gitlab/url_blocker.rb
Commit message (Expand)AuthorAgeFilesLines
* Add table and model for error tracking settingsReuben Pereira2019-01-071-2/+16
* Allow URLs to be validated as ascii_onlyJames Edwards-Jones2018-12-061-1/+8
* Merge branch 'security-11-5-fix-webhook-ssrf-ipv6' into 'security-11-5'Steve Azzopardi2018-11-281-4/+8
* Merge branch 'security-fj-crlf-injection' into 'master'Cindy Pallares2018-11-281-5/+14
* Merge branch 'security-stored-xss-for-environments' into 'master'Cindy Pallares2018-11-281-2/+4
* Merge branch 'sh-block-other-localhost' into 'master'Thiago Presa2018-10-251-0/+7
|\
| * Block loopback addresses in UrlBlockerStan Hu2018-09-051-0/+7
* | Enable frozen string for lib/gitlab/*.rbgfyoung2018-10-221-0/+2
|/
* Block link-local addresses in URLBlockerStan Hu2018-08-121-0/+8
* Avoid checking the user format in every url validationFrancisco Javier López2018-06-111-2/+2
* Add validation to webhook and service URLs to ensure they are not blocked bec...Francisco Javier López2018-06-011-5/+12
* Rename allow_private_networks to allow_local_networkDouwe Maan2018-04-021-2/+2
* Make error messages even more descriptiveDouwe Maan2018-04-021-33/+47
* Raise more descriptive errors when URLs are blockedDouwe Maan2018-04-021-14/+32
* Merge branch 'fj-15329-services-callbacks-ssrf' into 'security-10-6'Douwe Maan2018-03-211-10/+13
* Merge branch 'ssrf-protections-round-2' into 'security-10-1'Douwe Maan2017-11-081-1/+3
* Merge branch 'rs-alphanumeric-ssh-params' into 'security-9-4'jej/security-release-2017-08-10James Edwards-Jones2017-08-101-0/+8
* Merge branch 'ssrf' into 'security' Rubén Dávila2017-03-201-0/+2
* Merge branch 'ssrf' into 'security' Douwe Maan2017-03-201-0/+57