summaryrefslogtreecommitdiff
path: root/spec/lib/gitlab/url_blocker_spec.rb
Commit message (Expand)AuthorAgeFilesLines
* Add frozen_string_literal to lib part 2Thong Kuah2019-08-231-0/+2
* Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhqRobert Speicher2019-07-291-12/+32
|\
| * Fix Server Side Request Forgery mitigation bypassFrancisco Javier López2019-07-151-12/+32
* | [ADD] outbound requests whitelistReuben Pereira2019-07-241-28/+182
|/
* Don't use bang method when there is no safe methodReuben Pereira2019-07-121-2/+2
* Add DNS rebinding protection settingsOswaldo Ferreira2019-05-301-0/+35
* Protect Gitlab::HTTP against DNS rebinding attackDouwe Maan2019-05-301-1/+47
* Align UrlValidator to validate_url gem implementation.Thong Kuah2019-04-111-3/+3
* Allow URLs to be validated as ascii_onlyJames Edwards-Jones2018-12-061-0/+21
* Merge branch 'security-11-5-fix-webhook-ssrf-ipv6' into 'security-11-5'Steve Azzopardi2018-11-281-9/+99
* Merge branch 'security-stored-xss-for-environments' into 'master'Cindy Pallares2018-11-281-2/+10
* Block loopback addresses in UrlBlockerStan Hu2018-09-051-1/+21
* Block link-local addresses in URLBlockerStan Hu2018-08-121-1/+24
* Avoid checking the user format in every url validationFrancisco Javier López2018-06-111-14/+32
* Add validation to webhook and service URLs to ensure they are not blocked bec...Francisco Javier López2018-06-011-2/+8
* Rename allow_private_networks to allow_local_networkDouwe Maan2018-04-021-6/+6
* Merge branch 'fj-15329-services-callbacks-ssrf' into 'security-10-6'Douwe Maan2018-03-211-1/+44
* Merge branch 'ssrf-protections-round-2' into 'security-10-1'Douwe Maan2017-11-081-0/+16
* Merge branch 'rs-alphanumeric-ssh-params' into 'security-9-4'jej/security-release-2017-08-10James Edwards-Jones2017-08-101-0/+34
* Remove superfluous lib: true, type: redis, service: true, models: true, servi...Rémy Coutable2017-07-271-1/+1
* Merge branch 'ssrf' into 'security' Douwe Maan2017-03-201-0/+31
View Lorry Controller Status