GitLab

- All definitions have been replaced by classes:
  http://graphql-ruby.org/schema/class_based_api.html
- Authorization & Presentation have been refactored to work in the
  class based system
- Loaders have been replaced by resolvers
- Times are now coersed as ISO 8601

Server Side Request Forgery in Services and Web Hooks

See merge request gitlab/gitlabhq!2337

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Signed-off-by: Rémy Coutable <remy@rymai.me>

it's inside lib/tasks/*

Also try to use the same config from EE

Signed-off-by: Rémy Coutable <remy@rymai.me>

And use .rubocop.yml to exclude paths we don't care,
rather than using the cop itself to exclude.

An upcoming update to rubocop-gitlab-security added additional
violations.

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

See https://gitlab.com/gitlab-org/gitlab-ce/issues/35869

 for the
rationale.
Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

This cop adds an offense when `before`, `after`, or `around` are used as
single-line blocks.

Signed-off-by: Rémy Coutable <remy@rymai.me>

Signed-off-by: Rémy Coutable <remy@rymai.me>

[ci skip]
Signed-off-by: Rémy Coutable <remy@rymai.me>