summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Avoid exposing unaccessible repo data upon GFM processingOswaldo Ferreira2019-08-261-0/+16
* Add captcha if there are multiple failed login attemptsMałgorzata Ksionek2019-08-264-1/+50
* Merge branch 'security-12-0-enable-image-proxy' into '12-0-stable'GitLab Release Tools Bot2019-08-2611-6/+139
|\
| * Add support for using a Camo proxy serverBrett Walker2019-08-1511-6/+139
* | Merge branch 'security-epic-notes-api-reveals-historical-info-ce-12-0' into '...GitLab Release Tools Bot2019-08-263-5/+9
|\ \
| * | Revert parameter change to fix specPatrick Derichs2019-08-091-1/+1
| * | Filter out old system notes for epicsPatrick Derichs2019-08-093-6/+10
| |/
* | Merge branch 'security-61974-limit-issue-comment-size-12-0' into '12-0-stable'GitLab Release Tools Bot2019-08-262-1/+5
|\ \
| * | Limit the size of issuable description and commentsAlexandru Croitor2019-08-222-1/+5
| |/
* | Merge branch 'security-fix_jira_ssrf_vulnerability-12-0' into '12-0-stable'GitLab Release Tools Bot2019-08-261-0/+66
|\ \
| * | Fix DNS rebind vulnerability for JIRA integrationFelipe Artur2019-08-081-0/+66
| |/
* | Merge branch 'security-project-import-bypass-12-0' into '12-0-stable'GitLab Release Tools Bot2019-08-261-0/+88
|\ \
| * | Fix project import restricted visibility bypassGeorge Koltsov2019-08-151-0/+88
| |/
* | Merge branch 'security-add-job-activity-limit-ce-12-0' into '12-0-stable'GitLab Release Tools Bot2019-08-261-0/+21
|\ \
| * | Add active_jobs_limit to plans tableFabio Pitino2019-08-211-0/+21
| |/
* | Merge branch 'security-personal-snippets-12-0' into '12-0-stable'GitLab Release Tools Bot2019-08-262-4/+9
|\ \
| * | Add direct upload support for personal snippetsJan Provaznik2019-08-232-4/+9
| |/
* | Re-escape whole HTML content instead of only matchJan Provaznik2019-08-234-13/+35
|/
* Merge branch 'security-github-ssrf-redirect-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-243-3/+26
|\
| * Do not allow localhost url redirection in GitHub Integrationmanojmj2019-07-093-3/+26
* | Merge branch 'security-dns-ssrf-bypass-12-0' into '12-0-stable'GitLab Release Tools Bot2019-07-241-3/+13
|\ \
| * | Fix Server Side Request Forgery mitigation bypassFrancisco Javier López2019-07-041-3/+13
| |/
* | Merge branch 'security-60143-patch-additional-xss-issue-12.0' into '12-0-stable'GitLab Release Tools Bot2019-07-245-51/+77
|\ \
| * | Extract SanitizeNodeLink and apply to WikiLinkFilterKerri Miller2019-07-085-51/+77
| |/
* | Drop feature to take ownership of a trigger tokenFabio Pitino2019-07-171-21/+0
|/
* Merge branch 'security-fp-prevent-billion-laughs-attack-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-263-4/+112
|\
| * Prevent Billion Laughs attackFabio Pitino2019-06-073-4/+112
* | Merge branch 'security-12-0-mr-head-pipeline-leak' into '12-0-stable'GitLab Release Tools Bot2019-06-261-1/+3
|\ \
| * | Gate MR head_pipeline behind read_pipeline abilityMatija Čupić2019-06-121-1/+3
| |/
* | Merge branch 'security-59581-related-merge-requests-count-12-0' into '12-0-st...GitLab Release Tools Bot2019-06-265-10/+10
|\ \
| * | Expose merge requests count based on user accessAlexandru Croitor2019-06-185-10/+10
* | | Merge branch 'security-DOS_issue_comments_banzai-12-0' into '12-0-stable'GitLab Release Tools Bot2019-06-261-1/+1
|\ \ \
| * | | Fix DOS when rendering issue/MR commentsMario de la Ossa2019-06-181-1/+1
| |/ /
* | | Merge branch 'security-bvl-enforce-graphql-type-authorization-12-0' into '12-...GitLab Release Tools Bot2019-06-261-0/+2
|\ \ \
| * | | Fix failing auhtorizations in GraphQLBob Van Landuyt2019-06-201-0/+2
* | | | Merge branch 'sh-quiet-backup-secrets-log' into 'master'12-0-stable-patch-2Rémy Coutable2019-06-251-2/+2
* | | | Merge branch '63513-ensure-gitlab-jsoncache-includes-the-gitlab-version-in-th...Stan Hu2019-06-251-2/+2
* | | | Merge branch '63510-error-parsing-true-boolean-in-gitlab-jsoncache' into 'mas...Ash McKenzie2019-06-251-1/+1
* | | | Merge branch 'fix-labels-in-hooks' into 'master'Ash McKenzie2019-06-252-2/+2
* | | | Merge branch 'bug/63162-duplicate_path_in_links' into 'master'Sean McGivern2019-06-251-0/+2
* | | | Merge branch 'fix-microsoft-teams-notification-flags' into 'master'Stan Hu2019-06-251-2/+3
|/ / /
* | | Merge branch '63417-add-missing-class' into 'master'Kamil Trzciński2019-06-191-1/+1
* | | Merge branch 'zj-feature-flag-default-on-catfile-cache' into 'master'Douwe Maan2019-06-193-20/+35
|/ /
* | Merge branch '56737-commits-and-mr-events-on-jira-api' into 'master'Stan Hu2019-06-171-1/+1
|\ \
| * | 56737 Expose currently supported events properly on services APIZsolt Kovari2019-06-161-1/+1
* | | Merge branch '55362-refresh-blank-service-account-token' into 'master'Thong Kuah2019-06-171-1/+1
|\ \ \
| * | | Refresh service_account_token for kubernetes_namespaces55362-refresh-blank-service-account-tokenDylan Griffith2019-06-141-1/+1
* | | | Merge branch 'generate-spans-for-sections' into 'master'Sean McGivern2019-06-171-12/+75
|\ \ \ \
| * | | | Remove unused lineFabio Pitino2019-06-171-1/+0
| * | | | Compact syntax for default class namesFabio Pitino2019-06-171-5/+3