| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|\
| |
| |
| |
| | |
Enable serving static objects from an external storage
See merge request gitlab-org/gitlab-ce!31025
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It consists of two parts:
1. Redirecting users to the configured external storage
1. Allowing the external storage to request the static object(s)
on behalf of the user by means of specific tokens
Part of https://gitlab.com/gitlab-com/gl-infra/infrastructure/issues/6829
|
| |
| |
| |
| |
| | |
This presenter will be used in an upcoming MR which adds
rendering of epic events on group activity page.
|
| | |
|
|/
|
|
| |
to doc
|
|\
| |
| |
| |
| |
| |
| | |
Makes custom Pages domain open as external link in new tab
Closes #66067
See merge request gitlab-org/gitlab-ce!32130
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Creates a helper method that takes body text and a url.
The output is a external link with icon.
It contains the noopenner noreferrer attributes for security.
Usage: external_link(domain.title, domain.url)
Add rspec test for ExternalLinkHelper
Add changelog for MR 32130
|
| |
| |
| |
| |
| | |
RailsHelpers.stub_rails_env takes care of
stubbing Rails.env
|
| |
| |
| |
| |
| | |
The current state of group issue boards does not show the "Add issues"
button on the UI for users that are reporters of group child projects.
|
|\ \
| |/
|/|
| |
| |
| |
| | |
Remove spec/rails_helper.rb
Closes #66741
See merge request gitlab-org/gitlab-ce!32380
|
| |
| |
| |
| |
| | |
rails_helper.rb's only logic was to require
spec_helper.rb.
|
| |
| |
| |
| |
| | |
Fixes RelativeLinkFilter for users that don't have access
to the project's repository
|
| |
| |
| |
| | |
All avatars now visible in commit trailers.
|
| |
| |
| |
| |
| |
| |
| | |
- Use "results" instead of "blobs", "wiki blobs", "snippet blobs"
- Use "comments" instead of "notes"
- Use correct pluralization
- Don't add "1 - 10 of" if there's only one page
|
|\ \ |
|
| |\ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
into 'master'
Fix HTML injection for label description
See merge request gitlab/gitlabhq!3250
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Add changelog entry
Add spec
|
| |\ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Prevent disclosure of merge request id via email
See merge request gitlab/gitlabhq!3313
|
| | |/ /
| | | |
| | | |
| | | |
| | | | |
Do not disclosure merge request id via email for unauthorized users
when closing issues.
|
| |\ \ \
| | |_|/
| |/| |
| | | |
| | | | |
Avoid exposing unaccessible repo data upon GFM post processing
See merge request gitlab/gitlabhq!3344
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
When post-processing relative links to absolute links
RelativeLinkFilter didn't take into consideration that
internal repository data could be exposed for users
that do not have repository access to the project.
This commit solves that by checking whether the user
can `download_code` at this repository, avoiding any
processing of this filter if the user can't.
Additionally, if we're processing for a group (
no project was given), we check if the user can
read it in order to expand the href as an extra.
That doesn't seem necessarily a breach now,
but an extra check doesn't hurt as after all
the user needs to be able to `read_group`.
|
| | | | |
|
|\ \ \ \
| |/ / /
|/| | |
| | | |
| | | | |
git-user-related local test failures
See merge request gitlab-org/gitlab-ce!31437
|
| | |/
| |/|
| | |
| | |
| | |
| | | |
Some of the tests fail locally due to the git user being different
than it is on the test runners. I'd really like to be able to run
all of the tests locally.
|
| |/
|/|
| |
| |
| |
| |
| |
| |
| |
| | |
Some pipeline status icon tooltips were showing
"Commit: ..." which customers found to be
misleading since it was not the commit that was
failing but the pipeline.
We are changing all status icon tooltips to say
"Pipeline: ..." instead of "Commit: ..." now.
|
| |
| |
| |
| |
| |
| | |
- Adds UI to configure in group and project settings
- Removes notification configuration for users when
disabled at group or project level
|
| |
| |
| |
| |
| | |
This link is shown when a user tries to login with an unconfirmed
email address and the grace period has expired
|
| |
| |
| |
| |
| | |
This introduces several changes, but these are all just ported from the
EE project.
|
| |
| |
| |
| |
| |
| | |
into 'master'"
This reverts merge request !30808
|
| |
| |
| |
| |
| |
| |
| |
| | |
This adds a notification to let users know of our updated privacy
policy.
Users can dismiss the notification either by following the link or
closing the notification via an "x" icon.
|
| |
| |
| |
| |
| |
| | |
Querying all counts for the different search results in the same request
led to timeouts, so we now only calculate the count for the *current*
search results, and request the others in separate asynchronous calls.
|
| | |
|
|/ |
|
| |
|
|\
| |
| |
| |
| |
| |
| | |
Remove code related to object hierarchy and MySQL
Closes #65056 and #65055
See merge request gitlab-org/gitlab-ce!31095
|
| |
| |
| |
| |
| | |
These are not required because MySQL is not
supported anymore
|
|/
|
|
| |
Without this change, we get a NoMethodError on nil
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
into 'master'
Remove project param from `#show_label_issuables_link?`
Closes #62217
See merge request gitlab-org/gitlab-ce!31038
|
| |
| |
| |
| | |
The project param is unnecessary here
|