summaryrefslogtreecommitdiff
path: root/spec
Commit message (Expand)AuthorAgeFilesLines
* Add list_projects endpoint to error trackingReuben Pereira2019-02-061-2/+112
* Add service to get sentry projects listReuben Pereira2019-02-061-0/+149
* Merge branch 'bvl-fix-race-condition-creating-signature' into 'master'Rémy Coutable2019-02-062-1/+49
|\
| * Avoid race conditions when creating GpgSignatureBob Van Landuyt2019-02-062-1/+49
* | Revert "Convert noteable_note_spec.js to Vue test utils"Winnie Hellmann2019-02-061-70/+23
|/
* Reduce Bundle Size by lazy loading markdown-itTim Zallmann2019-02-063-44/+132
* Allow custom squash commit messagesLuke Duncalfe2019-02-0611-37/+177
* Merge branch '43681-display-last-activity-and-created-at-datetimes-for-users-...Filipa Lacerda2019-02-063-4/+138
|\
| * Add last activity to user administrationBrandon Labuschagne2019-02-053-4/+138
* | Merge branch 'cluster_application_version_updated' into 'master'Grzegorz Bizon2019-02-068-104/+56
|\ \
| * | Refactor specs to run shared parts only when usedThong Kuah2019-02-077-24/+34
| * | Update version on :installed, not :installingThong Kuah2019-02-077-84/+16
| * | Update version column after application is updatedThong Kuah2019-02-061-0/+10
* | | Merge dev.gitlab.org master into GitLab.com masterYorick Peterse2019-02-061-0/+25
|\ \ \
| * \ \ Merge branch 'security-makrdown-release-description-vulnerability' into 'master'Yorick Peterse2019-02-061-0/+25
| |\ \ \
| | * | | Fix Markdown of release notesShinya Maeda2019-01-301-0/+25
| | * | | Merge branch '56860-fix-spec-race-condition-upside-the-head' into 'master'Douglas Barbosa Alexandre2019-01-281-0/+3
| | * | | [master] Pipelines section is available to unauthorized usersKamil Trzciński2019-01-2815-53/+223
| | * | | Merge branch 'fix/security-group-user-removal' into 'master'Yorick Peterse2019-01-253-7/+59
| | |\ \ \
| | | * | | Add subresources removal to member destroy serviceJames Lopez2019-01-253-7/+59
| | * | | | Merge branch 'security-import-path-logging' into 'master'Yorick Peterse2019-01-254-3/+51
| | |\ \ \ \
| | | * | | | Fix path disclosure on Project ImportJames Lopez2019-01-074-3/+51
| | * | | | | Merge branch 'security-guests-can-see-list-of-merge-requests' into 'master'Yorick Peterse2019-01-253-9/+110
| | |\ \ \ \ \
| | | * | | | | Group Guests are no longer able to see merge requestsTiago Botelho2019-01-213-9/+110
| | * | | | | | Merge branch 'security-import-project-visibility' into 'master'Yorick Peterse2019-01-252-1/+146
| | |\ \ \ \ \ \
| | | * | | | | | Fix tree restorer visibility levelJames Lopez2019-01-242-1/+146
| | * | | | | | | Merge branch 'security-contributed-projects' into 'master'Yorick Peterse2019-01-252-0/+44
| | |\ \ \ \ \ \ \
| | | * | | | | | | Fix contributed projects finder shown private infoJames Lopez2019-01-082-0/+44
| | * | | | | | | | Merge branch 'security-do-not-process-mr-ref-for-guests' into 'master'Yorick Peterse2019-01-251-1/+11
| | |\ \ \ \ \ \ \ \
| | | * | | | | | | | Don't process MR refs for guests in the notesOswaldo Ferreira2019-01-101-1/+11
| | * | | | | | | | | Merge branch 'security-22076-sanitize-url-in-names' into 'master'Yorick Peterse2019-01-252-3/+19
| | |\ \ \ \ \ \ \ \ \
| | | * | | | | | | | | Use `sanitize_name` to sanitize URL in user full nameKushal Pandya2019-01-221-3/+5
| | | * | | | | | | | | Add `sanitize_name` helper to sanitize URLs in user full nameKushal Pandya2019-01-221-0/+14
| | * | | | | | | | | | Merge branch 'sh-fix-import-redirect-vulnerability' into 'master'Yorick Peterse2019-01-252-3/+16
| | |\ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | Alias GitHub and BitBucket OAuth2 callback URLsStan Hu2019-01-222-3/+16
| | * | | | | | | | | | | [master] Check access rights when creating/updating ProtectedRefsFrancisco Javier López2019-01-251-15/+8
| | * | | | | | | | | | | Merge branch 'security-55320-stored-xss-in-user-status' into 'master'Tim Zallmann2019-01-251-3/+3
| | |\ \ \ \ \ \ \ \ \ \ \ | | | |_|_|_|_|_|_|_|/ / / | | |/| | | | | | | | | |
| | | * | | | | | | | | | Use sanitized user status message for user popoverDennis Tang2019-01-231-3/+3
| | | |/ / / / / / / / /
| | * | | | | | | | | | Merge branch 'security-2767-verify-lfs-finalize-from-workhorse' into 'master'Yorick Peterse2019-01-241-5/+18
| | |\ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | Verify that LFS upload requests are genuineNick Thomas2019-01-221-5/+18
| | | |/ / / / / / / / /
| | * | | | | | | | | | Merge branch 'security-project-move-users' into 'master'Yorick Peterse2019-01-242-6/+38
| | |\ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | Sent notification only to authorized usersJan Provaznik2019-01-232-6/+38
| | | |/ / / / / / / / /
| | * | | | | | | | | | Merge branch 'security-fix-user-email-tag-push-leak' into 'master'Yorick Peterse2019-01-241-2/+2
| | |\ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | Fix private user email being visible in tag webhooksLuke Duncalfe2019-01-181-2/+2
| | | * | | | | | | | | | Prefer build() rather than create()Luke Duncalfe2019-01-151-1/+1
| | | | |/ / / / / / / / | | | |/| | | | | | | |
| | * | | | | | | | | | [master] Resolve "[Security] Stored XSS via KaTeX"Constance Okoghenun2019-01-241-1/+17
| | * | | | | | | | | | Merge branch 'extract-pages-with-rubyzip' into 'master'Yorick Peterse2019-01-2410-9/+356
| | |\ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | Extract GitLab Pages using RubyZipKamil Trzciński2019-01-2210-9/+356
| | * | | | | | | | | | | Merge branch 'security-commit-status-shown-for-guest-user' into 'master'Yorick Peterse2019-01-241-0/+21
| | |\ \ \ \ \ \ \ \ \ \ \
| | | * | | | | | | | | | | Stop showing ci for guest usersSteve Azzopardi2019-01-231-0/+21
| | | | |_|_|_|_|/ / / / / | | | |/| | | | | | | | |