summaryrefslogtreecommitdiff
path: root/spec
Commit message (Expand)AuthorAgeFilesLines
* Remove invalid Namespace GraphQL type specRobert Speicher2019-07-241-2/+0
* Merge branch 'security-fix-badges-leaked-to-unauthorized-users-11-11' into '1...GitLab Release Tools Bot2019-07-241-30/+94
|\
| * Don't display badges when builds are restrictedFabio Pitino2019-06-271-30/+94
* | Merge branch 'security-60143-patch-additional-xss-issue-11.11' into '11-11-st...GitLab Release Tools Bot2019-07-243-42/+151
|\ \
| * | Extract SanitizeNodeLink and apply to WikiLinkFilterKerri Miller2019-07-083-42/+151
* | | Merge branch 'security-github-ssrf-redirect-11-11' into '11-11-stable'GitLab Release Tools Bot2019-07-241-0/+68
|\ \ \
| * | | Do not allow localhost url redirection in GitHub Integrationmanojmj2019-07-091-0/+68
| |/ /
* | | Merge branch 'security-dns-ssrf-bypass-11-11' into '11-11-stable'GitLab Release Tools Bot2019-07-242-12/+33
|\ \ \
| * | | Fix Server Side Request Forgery mitigation bypassFrancisco Javier López2019-07-042-12/+33
| |/ /
* | | Merge branch 'security-mr-pipeline-permissions-11-11' into '11-11-stable'GitLab Release Tools Bot2019-07-241-4/+94
|\ \ \
| * | | Use MergeRequest#source_project as permissions reference for MergeRequest#all...drew cimino2019-07-051-4/+94
| |/ /
* | | Merge branch 'security-remove-take-trigger-ownership-feature-11-11' into '11-...GitLab Release Tools Bot2019-07-242-51/+0
|\ \ \
| * | | Drop feature to take ownership of a trigger tokenFabio Pitino2019-07-102-51/+0
| |/ /
* | | Merge branch 'security-2873-restrict-slash-commands-to-users-who-can-log-in-1...GitLab Release Tools Bot2019-07-242-0/+41
|\ \ \
| * | | Restrict slash commands to users who can log inHordur Freyr Yngvason2019-07-122-0/+41
| |/ /
* | | Merge branch 'security-bvl-filter-mr-params-11-11' into '11-11-stable'GitLab Release Tools Bot2019-07-242-2/+56
|\ \ \
| * | | Filter params in MR build serviceBob Van Landuyt2019-07-172-2/+56
* | | | Merge branch 'security-hide_moved_issue_id-11-11' into '11-11-stable'GitLab Release Tools Bot2019-07-241-0/+33
|\ \ \ \ | |/ / / |/| | |
| * | | Do not show moved issue ids for user not authorizedFelipe Artur2019-07-151-0/+33
| |/ /
* | | Merge branch 'sh-fix-appearance-spec-failure' into 'master'Douglas Barbosa Alexandre2019-07-161-2/+1
|/ /
* | Support object storage at FileMover classOswaldo Ferreira2019-06-301-36/+83
|/
* Merge branch 'security-notes-in-private-snippets-11-11' into '11-11-stable'GitLab Release Tools Bot2019-06-262-1/+114
|\
| * Correctly check permissions when creating snippet notesMarkus Koller2019-06-062-1/+114
* | Merge branch 'security-fp-prevent-billion-laughs-attack-11-11' into '11-11-st...GitLab Release Tools Bot2019-06-263-4/+132
|\ \
| * | Prevent Billion Laughs attackFabio Pitino2019-06-073-4/+132
| |/
* | Merge branch 'security-prevent-detection-of-merge-request-template-name-11-11...GitLab Release Tools Bot2019-06-262-29/+101
|\ \
| * | Authorize access before serving project templateLuke Duncalfe2019-06-122-29/+101
* | | Merge branch 'security-11-11-mr-head-pipeline-leak' into '11-11-stable'GitLab Release Tools Bot2019-06-261-0/+25
|\ \ \
| * | | Gate MR head_pipeline behind read_pipeline abilityMatija Čupić2019-06-121-0/+25
| |/ /
* | | Merge branch 'security-DOS_issue_comments_banzai-11-11' into '11-11-stable'GitLab Release Tools Bot2019-06-261-0/+5
|\ \ \
| * | | Fix DOS when rendering issue/MR commentsMario de la Ossa2019-06-131-0/+5
| |/ /
* | | Merge branch 'security-persist-tmp-snippet-uploads-11-11' into '11-11-stable'GitLab Release Tools Bot2019-06-265-86/+148
|\ \ \
| * | | Persist tmp snippet uploadsOswaldo Ferreira2019-06-175-86/+148
| |/ /
* | | Merge branch 'security-59581-related-merge-requests-count-11-11' into '11-11-...GitLab Release Tools Bot2019-06-262-4/+41
|\ \ \
| * | | Expose merge requests count based on user accessAlexandru Croitor2019-06-182-4/+41
| |/ /
* | | Merge branch 'security-bvl-enforce-graphql-type-authorization-11-11' into '11...GitLab Release Tools Bot2019-06-265-38/+59
|\ \ \
| * | | Fix failing auhtorizations in GraphQLBob Van Landuyt2019-06-205-38/+59
| |/ /
* | | Merge branch 'security-2858-fix-color-validation-11-11' into '11-11-stable'GitLab Release Tools Bot2019-06-261-0/+43
|\ \ \
| * | | Fix color validation regexHeinrich Lee Yu2019-06-251-0/+43
| |/ /
* | | Merge branch 'security-fix-issue-59379-11-11' into '11-11-stable'GitLab Release Tools Bot2019-06-262-1/+7
|\ \ \
| * | | Disable Rails SQL query cache when applying service templatesStan Hu2019-06-252-1/+7
| |/ /
* | | Merge branch '11-11-stable-patch-4' into '11-11-stable'Marin Jankovski2019-06-264-6/+107
|\ \ \
| * \ \ Merge branch '29769-11-11-port' into '11-11-stable-patch-4'Marin Jankovski2019-06-263-6/+69
| |\ \ \
| | * | | Fix IDE commit to use start_refPaul Slaughter2019-06-263-6/+69
| | |/ /
| * | | Merge branch 'sh-fix-fogbugz-import' into 'master'James Lopez2019-06-261-0/+38
| |/ /
* | | Add client code to call GetObjectDirectorySize RPCpb-quarantine-size-check-11-11-cePatrick Bajao2019-06-252-0/+23
|/ /
* | Merge branch 'sh-fix-openid-connect-defaults' into 'master'Ash McKenzie2019-06-101-0/+8
* | Merge branch 'revert-86900f00' into 'master'Grzegorz Bizon2019-06-105-15/+15
* | Merge branch '62713-fix-uninstalling-cluster-apps' into 'master'Douglas Barbosa Alexandre2019-06-101-0/+24
* | Merge branch 'revert-git-depth-for-merge-request' into 'master'Kamil Trzciński2019-06-101-19/+3
View Lorry Controller Status