summaryrefslogtreecommitdiff
path: root/spec
Commit message (Expand)AuthorAgeFilesLines
* Prevent Billion Laughs attackFabio Pitino2019-07-023-4/+132
* Merge branch 'security-DOS_issue_comments_banzai' into 'master'Marin Jankovski2019-07-021-0/+5
|\
| * Fix DOS when rendering issue/MR commentsMario de la Ossa2019-06-131-0/+5
* | Merge branch 'security-bvl-enforce-graphql-type-authorization' into 'master'Marin Jankovski2019-07-028-41/+144
|\ \
| * | Enforce authorizations for non-nullable fieldsBob Van Landuyt2019-06-212-34/+72
| * | Add authorize to LabelType and NamespaceTypeBob Van Landuyt2019-06-215-7/+6
| * | Add a cop to ensure we authorize GraphQL typesBob Van Landuyt2019-06-211-0/+66
* | | Merge branch 'security-59581-related-merge-requests-count' into 'master'Marin Jankovski2019-07-025-31/+133
|\ \ \
| * | | Expose merge requests count based on user accessAlexandru Croitor2019-06-185-31/+133
* | | | Merge branch 'security-2858-fix-color-validation' into 'master'Marin Jankovski2019-07-021-0/+43
|\ \ \ \
| * | | | Fix color validation regexHeinrich Lee Yu2019-06-251-0/+43
* | | | | Merge branch 'security-prevent-detection-of-merge-request-template-name' into...Marin Jankovski2019-07-022-29/+101
|\ \ \ \ \
| * | | | | Authorize access before serving project templateLuke Duncalfe2019-06-112-29/+101
* | | | | | Merge branch '62765-add-jquery-to-jest-setup' into 'master'Mike Greiling2019-06-261-0/+6
|\ \ \ \ \ \
| * | | | | | Add jQuery to jest test_setupPaul Slaughter2019-06-261-0/+6
* | | | | | | Merge branch 'refactor/remove-sentry-from-app-settings' into 'master'Stan Hu2019-06-265-74/+9
|\ \ \ \ \ \ \
| * | | | | | | refactor: remove Sentry from application settingsRoger Meier2019-06-255-74/+9
* | | | | | | | Merge branch 'vue-tree-logs-tree-request' into 'master'Filipa Lacerda2019-06-263-2/+143
|\ \ \ \ \ \ \ \
| * | | | | | | | Fetch commit message with log_tree endpointPhil Hughes2019-06-253-2/+143
* | | | | | | | | Merge branch '12426-modal-store-spec' into 'master'Phil Hughes2019-06-261-1/+1
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Removes EE differences12426-modal-store-specFilipa Lacerda2019-06-261-1/+1
* | | | | | | | | | Merge branch 'rj-fix-master' into 'master'Jan Provaznik2019-06-261-2/+8
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | Stub manual_sorting flagrj-fix-masterRajat Jain2019-06-261-2/+8
* | | | | | | | | | | Always display environment selectorReuben Pereira2019-06-263-11/+78
* | | | | | | | | | | Re-name entries in one commitDenys Mishunov2019-06-265-11/+105
* | | | | | | | | | | Merge branch 'sh-cache-negative-entries-find-commit' into 'master'Douglas Barbosa Alexandre2019-06-261-0/+13
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Allow caching of negative FindCommit matchessh-cache-negative-entries-find-commitStan Hu2019-06-251-0/+13
* | | | | | | | | | | | Fix failing spec/models/internal_id_spec.rb specJan Provaznik2019-06-261-1/+1
| |_|_|_|_|/ / / / / / |/| | | | | | | | | |
* | | | | | | | | | | Merge branch 'quarantine-flaky-user-signup-spec' into 'master'Kushal Pandya2019-06-261-1/+1
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Quarantine flaky specThong Kuah2019-06-261-1/+1
* | | | | | | | | | | | Merge branch '63710-fix-redis-namespace-warning' into 'master'Nick Thomas2019-06-261-1/+3
|\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | Use flushdb with the connection object in redis-namespace API63710-fix-redis-namespace-warningGabriel Mazetto2019-06-251-1/+3
* | | | | | | | | | | | | Merge branch '62214-migrations-and-models' into 'master'Andreas Brandl2019-06-266-0/+41
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | Add two new ActiveRecord models62214-migrations-and-modelsMayra Cabrera2019-06-256-0/+41
* | | | | | | | | | | | | | Speed up obtaining Let's Encrypt certificatesVladimir Shushlin2019-06-261-2/+10
* | | | | | | | | | | | | | Merge branch '51952-forking-via-webide' into 'master'Nick Thomas2019-06-264-34/+107
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / / |/| | | | | | | | | | | | |
| * | | | | | | | | | | | | Support redirect paths starting with a dash51952-forking-via-webideMarkus Koller2019-06-253-34/+99
| * | | | | | | | | | | | | Make checks for continue_params more robustMarkus Koller2019-06-251-0/+8
* | | | | | | | | | | | | | Merge branch 'sh-service-template-bug' into 'master'Thong Kuah2019-06-262-1/+7
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / / / / / |/| | | | | | | | | | | | |
| * | | | | | | | | | | | | Disable Rails SQL query cache when applying service templatessh-service-template-bugStan Hu2019-06-252-1/+7
| | |_|_|_|_|_|/ / / / / / | |/| | | | | | | | | | |
* | | | | | | | | | | | | Merge branch 'from-installable-to-not-installable' into 'master'Kushal Pandya2019-06-261-7/+9
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / |/| | | | | | | | | | | |
| * | | | | | | | | | | | Transition from installable to not_installablefrom-installable-to-not-installableEnrique Alcantara2019-06-241-7/+9
* | | | | | | | | | | | | Bring Manual Ordering on Issue ListRajat Jain2019-06-261-0/+46
* | | | | | | | | | | | | Merge branch 'graphql-error-when-authorizing-with-no-permissions-defined' int...Bob Van Landuyt2019-06-261-12/+39
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / / / / |/| | | | | | | | | | | |
| * | | | | | | | | | | | Remove unused authorized_find methodgraphql-error-when-authorizing-with-no-permissions-definedLuke Duncalfe2019-06-261-18/+0
| * | | | | | | | | | | | Sanity check for GraphQL authorized?Luke Duncalfe2019-06-261-0/+45
* | | | | | | | | | | | | Merge branch 'da-fix-cache-for-broadcast-message' into 'master'Stan Hu2019-06-251-3/+3
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | Set 2 weeks as the expiration time for the current broadcast messageDouglas Barbosa Alexandre2019-06-251-3/+3
| |/ / / / / / / / / / / /
* | | | | | | | | | | | | Merge branch 'da-fix-json-cache-false-values' into 'master'Stan Hu2019-06-251-1/+34
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | Parse the cached value when the it is falseDouglas Barbosa Alexandre2019-06-251-1/+34
| |/ / / / / / / / / / / /