summaryrefslogtreecommitdiff
path: root/spec/controllers/projects/issues_controller_spec.rb
Commit message (Collapse)AuthorAgeFilesLines
* Add latest changes from gitlab-org/gitlab@14-2-stable-eev14.2.0-rc42GitLab Bot2021-08-191-1/+1
|
* Add latest changes from gitlab-org/gitlab@14-1-stable-eev14.1.0-rc42GitLab Bot2021-07-201-5/+9
|
* Add latest changes from gitlab-org/gitlab@14-0-stable-eev14.0.0-rc42GitLab Bot2021-06-161-1/+1
|
* Add latest changes from gitlab-org/gitlab@13-12-stable-eev13.12.0-rc42GitLab Bot2021-05-191-2/+15
|
* Add latest changes from gitlab-org/gitlab@13-11-stable-eev13.11.0-rc43GitLab Bot2021-04-201-31/+37
|
* Add latest changes from gitlab-org/gitlab@13-10-stable-eev13.10.0-rc40GitLab Bot2021-03-161-6/+15
|
* Add latest changes from gitlab-org/gitlab@13-9-stable-eev13.9.0-rc42GitLab Bot2021-02-181-44/+13
|
* Add latest changes from gitlab-org/gitlab@13-8-stable-eev13.8.0-rc42Robert Speicher2021-01-201-4/+20
|
* Add latest changes from gitlab-org/gitlab@13-7-stable-eev13.7.0-rc42GitLab Bot2020-12-171-3/+53
|
* Add latest changes from gitlab-org/gitlab@13-6-stable-eev13.6.0-rc42GitLab Bot2020-11-191-3/+3
|
* Add latest changes from gitlab-org/gitlab@13-5-stable-eev13.5.0-rc42GitLab Bot2020-10-211-5/+13
|
* Add latest changes from gitlab-org/gitlab@13-4-stable-eeGitLab Bot2020-09-191-29/+60
|
* Add latest changes from gitlab-org/gitlab@13-3-stable-eeGitLab Bot2020-08-201-1/+69
|
* Add latest changes from gitlab-org/gitlab@13-2-stable-eeGitLab Bot2020-07-201-1/+38
|
* Add latest changes from gitlab-org/gitlab@13-1-stable-eeGitLab Bot2020-06-181-6/+5
|
* Add latest changes from gitlab-org/gitlab@13-0-stable-eeGitLab Bot2020-05-201-105/+176
|
* Add latest changes from gitlab-org/gitlab@12-10-stable-eeGitLab Bot2020-04-201-0/+39
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-04-141-9/+31
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-04-141-0/+42
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-04-071-2/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-04-021-0/+20
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-04-011-2/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-03-301-1/+1
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-03-211-0/+55
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-02-271-8/+8
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-02-061-6/+0
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-01-301-7/+0
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-01-301-6/+6
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-01-281-1/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2020-01-281-29/+29
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-191-0/+1
|
* Add latest changes from gitlab-org/gitlab@masterogolowinski-master-patch-80898GitLab Bot2019-12-161-2/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-131-2/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-131-0/+18
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-121-5/+5
|
* Restrict branches visible to guests in Issue feedKerri Miller2019-11-201-0/+37
| | | | | Notes related to branch creation should not be shown in an issue's activity feed when the user doesn't have access to :download_code.
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-081-2/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-071-2/+2
|
* Merge branch 'security-remove-leaky-401-responses-master' into 'master'GitLab Release Tools Bot2019-10-291-2/+2
|\ | | | | | | | | Private/internal repository enumeration via bruteforce on a vulnerable URL See merge request gitlab/gitlabhq!3454
| * Avoid #authenticate_user! in #route_not_foundKerri Miller2019-10-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | This method, #route_not_found, is executed as the final fallback for unrecognized routes (as the name might imply.) We want to avoid `#authenticate_user!` when calling `#route_not_found`; `#authenticate_user!` can, depending on the request format, return a 401 instead of redirecting to a login page. This opens a subtle security exploit where anonymous users will receive a 401 response when attempting to access a private repo, while a recognized user will receive a 404, exposing the existence of the private, hidden repo.
* | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-231-1/+1
| |
* | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-181-0/+1
|/
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-09-251-67/+121
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-09-181-1/+1
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-09-161-0/+25
|
* Add controller concern for paginated collections65988-optimize-snippet-listingsMarkus Koller2019-09-101-44/+10
| | | | | | We had similar code in a few places to redirect to the last page if the given page number is out of range. This unifies the handling in a new controller concern and adds usage of it in all snippet listings.
* Make it harder to delete issuables accidentallyStan Hu2019-08-291-2/+27
| | | | | | | | | | | | Previously submitting a DELETE request to an issuable URL would be enough to destroy it, but this should require human confirmation. We now require that the `destroy_confirm` parameter is set to a truthy value before this can complete. In addition, we log a Sentry error if a deletion arrived without confirmation. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62387
* Improve specs for Issues and Notes controllers63372-award-emoji-servicesLuke Duncalfe2019-08-211-6/+27
| | | | | | This adds test that Todos are completed. https://gitlab.com/gitlab-org/gitlab-ce/issues/63372
* Rewrite issues show spec as a feature specfix-design-management-router-ceLuke Duncalfe2019-08-051-14/+7
| | | | | | | | This spec needs to run as a request-style spec in order to invoke the Rails router. A controller-style spec matches the wrong route, and `session['user_return_to']` becomes incorrect.
* Use NotesFinder in IssuableActions modulePatrick Derichs2019-08-011-0/+22
| | | | | | | | | | Remove project from NotesFinder constructor Add project parameter to specs Also look for methods in private scope Fix specs to match new NotesFinder constructor