Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Prevent Billion Laughs attack | Fabio Pitino | 2019-07-02 | 3 | -4/+132 |
* | Merge branch 'security-DOS_issue_comments_banzai' into 'master' | Marin Jankovski | 2019-07-02 | 1 | -0/+5 |
|\ | |||||
| * | Fix DOS when rendering issue/MR comments | Mario de la Ossa | 2019-06-13 | 1 | -0/+5 |
* | | Merge branch 'security-bvl-enforce-graphql-type-authorization' into 'master' | Marin Jankovski | 2019-07-02 | 8 | -41/+144 |
|\ \ | |||||
| * | | Enforce authorizations for non-nullable fields | Bob Van Landuyt | 2019-06-21 | 2 | -34/+72 |
| * | | Add authorize to LabelType and NamespaceType | Bob Van Landuyt | 2019-06-21 | 5 | -7/+6 |
| * | | Add a cop to ensure we authorize GraphQL types | Bob Van Landuyt | 2019-06-21 | 1 | -0/+66 |
* | | | Merge branch 'security-59581-related-merge-requests-count' into 'master' | Marin Jankovski | 2019-07-02 | 5 | -31/+133 |
|\ \ \ | |||||
| * | | | Expose merge requests count based on user access | Alexandru Croitor | 2019-06-18 | 5 | -31/+133 |
* | | | | Merge branch 'security-2858-fix-color-validation' into 'master' | Marin Jankovski | 2019-07-02 | 1 | -0/+43 |
|\ \ \ \ | |||||
| * | | | | Fix color validation regex | Heinrich Lee Yu | 2019-06-25 | 1 | -0/+43 |
* | | | | | Merge branch 'security-prevent-detection-of-merge-request-template-name' into... | Marin Jankovski | 2019-07-02 | 2 | -29/+101 |
|\ \ \ \ \ | |||||
| * | | | | | Authorize access before serving project template | Luke Duncalfe | 2019-06-11 | 2 | -29/+101 |
* | | | | | | Merge branch '62765-add-jquery-to-jest-setup' into 'master' | Mike Greiling | 2019-06-26 | 1 | -0/+6 |
|\ \ \ \ \ \ | |||||
| * | | | | | | Add jQuery to jest test_setup | Paul Slaughter | 2019-06-26 | 1 | -0/+6 |
* | | | | | | | Merge branch 'refactor/remove-sentry-from-app-settings' into 'master' | Stan Hu | 2019-06-26 | 5 | -74/+9 |
|\ \ \ \ \ \ \ | |||||
| * | | | | | | | refactor: remove Sentry from application settings | Roger Meier | 2019-06-25 | 5 | -74/+9 |
* | | | | | | | | Merge branch 'vue-tree-logs-tree-request' into 'master' | Filipa Lacerda | 2019-06-26 | 3 | -2/+143 |
|\ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | Fetch commit message with log_tree endpoint | Phil Hughes | 2019-06-25 | 3 | -2/+143 |
* | | | | | | | | | Merge branch '12426-modal-store-spec' into 'master' | Phil Hughes | 2019-06-26 | 1 | -1/+1 |
|\ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | Removes EE differences12426-modal-store-spec | Filipa Lacerda | 2019-06-26 | 1 | -1/+1 |
* | | | | | | | | | | Merge branch 'rj-fix-master' into 'master' | Jan Provaznik | 2019-06-26 | 1 | -2/+8 |
|\ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | Stub manual_sorting flagrj-fix-master | Rajat Jain | 2019-06-26 | 1 | -2/+8 |
* | | | | | | | | | | | Always display environment selector | Reuben Pereira | 2019-06-26 | 3 | -11/+78 |
* | | | | | | | | | | | Re-name entries in one commit | Denys Mishunov | 2019-06-26 | 5 | -11/+105 |
* | | | | | | | | | | | Merge branch 'sh-cache-negative-entries-find-commit' into 'master' | Douglas Barbosa Alexandre | 2019-06-26 | 1 | -0/+13 |
|\ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | Allow caching of negative FindCommit matchessh-cache-negative-entries-find-commit | Stan Hu | 2019-06-25 | 1 | -0/+13 |
* | | | | | | | | | | | | Fix failing spec/models/internal_id_spec.rb spec | Jan Provaznik | 2019-06-26 | 1 | -1/+1 |
| |_|_|_|_|/ / / / / / |/| | | | | | | | | | | |||||
* | | | | | | | | | | | Merge branch 'quarantine-flaky-user-signup-spec' into 'master' | Kushal Pandya | 2019-06-26 | 1 | -1/+1 |
|\ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | Quarantine flaky spec | Thong Kuah | 2019-06-26 | 1 | -1/+1 |
* | | | | | | | | | | | | Merge branch '63710-fix-redis-namespace-warning' into 'master' | Nick Thomas | 2019-06-26 | 1 | -1/+3 |
|\ \ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | | Use flushdb with the connection object in redis-namespace API63710-fix-redis-namespace-warning | Gabriel Mazetto | 2019-06-25 | 1 | -1/+3 |
* | | | | | | | | | | | | | Merge branch '62214-migrations-and-models' into 'master' | Andreas Brandl | 2019-06-26 | 6 | -0/+41 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | | | Add two new ActiveRecord models62214-migrations-and-models | Mayra Cabrera | 2019-06-25 | 6 | -0/+41 |
* | | | | | | | | | | | | | | Speed up obtaining Let's Encrypt certificates | Vladimir Shushlin | 2019-06-26 | 1 | -2/+10 |
* | | | | | | | | | | | | | | Merge branch '51952-forking-via-webide' into 'master' | Nick Thomas | 2019-06-26 | 4 | -34/+107 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / / |/| | | | | | | | | | | | | | |||||
| * | | | | | | | | | | | | | Support redirect paths starting with a dash51952-forking-via-webide | Markus Koller | 2019-06-25 | 3 | -34/+99 |
| * | | | | | | | | | | | | | Make checks for continue_params more robust | Markus Koller | 2019-06-25 | 1 | -0/+8 |
* | | | | | | | | | | | | | | Merge branch 'sh-service-template-bug' into 'master' | Thong Kuah | 2019-06-26 | 2 | -1/+7 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / / / / / |/| | | | | | | | | | | | | | |||||
| * | | | | | | | | | | | | | Disable Rails SQL query cache when applying service templatessh-service-template-bug | Stan Hu | 2019-06-25 | 2 | -1/+7 |
| | |_|_|_|_|_|/ / / / / / | |/| | | | | | | | | | | | |||||
* | | | | | | | | | | | | | Merge branch 'from-installable-to-not-installable' into 'master' | Kushal Pandya | 2019-06-26 | 1 | -7/+9 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / |/| | | | | | | | | | | | | |||||
| * | | | | | | | | | | | | Transition from installable to not_installablefrom-installable-to-not-installable | Enrique Alcantara | 2019-06-24 | 1 | -7/+9 |
* | | | | | | | | | | | | | Bring Manual Ordering on Issue List | Rajat Jain | 2019-06-26 | 1 | -0/+46 |
* | | | | | | | | | | | | | Merge branch 'graphql-error-when-authorizing-with-no-permissions-defined' int... | Bob Van Landuyt | 2019-06-26 | 1 | -12/+39 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / / / / |/| | | | | | | | | | | | | |||||
| * | | | | | | | | | | | | Remove unused authorized_find methodgraphql-error-when-authorizing-with-no-permissions-defined | Luke Duncalfe | 2019-06-26 | 1 | -18/+0 |
| * | | | | | | | | | | | | Sanity check for GraphQL authorized? | Luke Duncalfe | 2019-06-26 | 1 | -0/+45 |
* | | | | | | | | | | | | | Merge branch 'da-fix-cache-for-broadcast-message' into 'master' | Stan Hu | 2019-06-25 | 1 | -3/+3 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | | | Set 2 weeks as the expiration time for the current broadcast message | Douglas Barbosa Alexandre | 2019-06-25 | 1 | -3/+3 |
| |/ / / / / / / / / / / / | |||||
* | | | | | | | | | | | | | Merge branch 'da-fix-json-cache-false-values' into 'master' | Stan Hu | 2019-06-25 | 1 | -1/+34 |
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |||||
| * | | | | | | | | | | | | | Parse the cached value when the it is false | Douglas Barbosa Alexandre | 2019-06-25 | 1 | -1/+34 |
| |/ / / / / / / / / / / / |