summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'security-use-untrusted-regexp-11-7' into '11-7-stable'GitLab Release Tools Bot2019-03-266-49/+59
|\
| * Make CI refs matching to to use UntrustedRegexpKamil Trzciński2019-03-156-49/+59
* | Rake task for removing exif from uploadsJan Provaznik2019-03-252-0/+175
|/
* Merge branch 'security-id-restricted-access-to-private-repo-11-7' into '11-7-...Yorick Peterse2019-02-271-11/+3
|\
| * Forbid creating discussions for users with restricted accessIgor Drozdov2019-02-071-11/+3
* | Merge branch 'security-tags-oracle-11-7' into '11-7-stable'Yorick Peterse2019-02-271-0/+2
|\ \
| * | Prevent Releases links API to leak tag existanceAlessio Caiazza2019-02-131-0/+2
| |/
* | Merge branch 'security-commit-private-related-mr-11-7' into '11-7-stable'Yorick Peterse2019-02-271-1/+9
|\ \
| * | Don't allow non-members to see private related MRsPatrick Bajao2019-02-151-1/+9
| |/
* | Merge branch 'security-50334-11-7' into '11-7-stable'Yorick Peterse2019-02-271-1/+2
|\ \
| * | Fix git clone revealing private repo's presenceMark Chao2019-02-191-1/+2
| |/
* | Merge branch 'security-protect-private-repo-information-11-7' into '11-7-stable'Yorick Peterse2019-02-273-18/+23
|\ \
| * | Prevent leaking of private repo data through APILuke Duncalfe2019-02-203-18/+23
| |/
* | Arbitrary file read via MergeRequestDiffFrancisco Javier López2019-02-271-0/+11
* | Merge branch 'security-kubernetes-local-ssrf-11-7' into '11-7-stable'Yorick Peterse2019-02-271-0/+8
|\ \
| * | Do not allow local urls in Kubernetes formThong Kuah2019-02-211-0/+8
| |/
* | Merge branch 'security-add-public-internal-groups-as-members-to-your-project-...Yorick Peterse2019-02-271-9/+6
|\ \
| * | Change policy regarding group visibilityMałgorzata Ksionek2019-02-201-9/+6
| |/
* | Merge branch 'security-11-7-57227-absolute-uri-missing-hierarchical-segment' ...Yorick Peterse2019-02-271-1/+5
|\ \
| * | Catch possible Addressable::URI::InvalidURIErrorBrett Walker2019-02-221-1/+5
| |/
* | Raise not implemented error on BaseLinker for package_urlOswaldo Ferreira2019-02-251-0/+4
* | Stop linking to unrecognized package sourcesOswaldo Ferreira2019-02-2410-27/+126
|/
* Merge branch 'sh-remove-bitbucket-mirror-constant' into 'master'Robert Speicher2019-02-051-2/+2
* Merge branch 'security-makrdown-release-description-vulnerability-11-7' into ...Yorick Peterse2019-02-041-1/+3
* Fix uninitialized constant with GitLab Pages deployStan Hu2019-01-291-1/+1
* Merge branch 'security-fix-user-email-tag-push-leak-11-7' into 'security-11-7'Yorick Peterse2019-01-241-1/+1
* Merge branch 'security-import-path-logging-11-7' into 'security-11-7'Yorick Peterse2019-01-241-12/+27
* Merge branch 'security-import-project-visibility-11-7' into 'security-11-7'Yorick Peterse2019-01-241-1/+8
* Merge branch 'security-11-7-2769-idn-homograph-attack' into '11-7-stable'Yorick Peterse2019-01-243-12/+89
|\
| * Show tooltip for malicious looking linksBrett Walker2019-01-213-12/+89
* | Merge branch 'security-pipeline-trigger-tokens-exposure-11-7' into 'security-...Yorick Peterse2019-01-243-6/+38
* | Merge branch 'security-fix-regex-dos-11-7' into 'security-11-7'Yorick Peterse2019-01-241-1/+2
* | Merge branch 'security-11-7-test-permissions' into 'security-11-7'Yorick Peterse2019-01-241-3/+3
* | Merge branch 'security-fix-lfs-import-project-ssrf-forgery-11-7' into 'securi...Yorick Peterse2019-01-242-5/+7
* | Merge branch 'security-2779-fix-email-comment-permissions-check-11-7' into 's...Yorick Peterse2019-01-241-1/+1
* | Merge branch 'security-extract-pages-with-rubyzip-dev-11-7' into 'security-11-7'Yorick Peterse2019-01-243-0/+206
|/
* Merge remote-tracking branch 'dev/11-7-stable' into 11-7-stableRobert Speicher2019-01-182-0/+35
|\
| * Merge branch '11-7-stable' from GitLab.orgYorick Peterse2019-01-153-7/+11
| |\
| * | Merge branch 'security-2770-verify-bundle-import-files-11-7' into 'security-1...Yorick Peterse2019-01-152-0/+35
* | | Merge branch '11-7-stable-sentry-mvc' into '11-7-stable-prepare-rc7'Robert Speicher2019-01-162-0/+118
|\ \ \ | |_|/ |/| |
| * | Merge branch '55178-sentry-issues-service' into 'master'Kamil Trzciński2019-01-112-0/+118
| |/
* | Merge branch 'sh-fix-gon-helper-avatar' into 'master'Rémy Coutable2019-01-151-4/+11
* | Merge branch 'remove-releases_page-feature-flag' into 'master'Kamil Trzciński2019-01-142-3/+0
|/
* Merge branch 'sh-revert-mr-23135' into 'master'Robert Speicher2019-01-091-2/+2
* Merge branch '49231-import-issues-csv' into 'master'Douwe Maan2019-01-073-4/+4
|\
| * Remove caching of CSV file49231-import-issues-csvHeinrich Lee Yu2019-01-071-2/+2
| * Refactor upload service to return uploaderHeinrich Lee Yu2019-01-073-3/+3
* | Add table and model for error tracking settingsReuben Pereira2019-01-073-2/+21
* | Merge branch 'sh-fix-issue-55914' into 'master'Rémy Coutable2019-01-071-3/+9
|\ \
| * | Fix Bitbucket Server import only including first 25 pull requestsStan Hu2019-01-061-3/+9
View Lorry Controller Status