1. 10 Jun, 2019 3 commits
    • Achilleas Pipinellis's avatar
      Merge branch 'docs-ci-variable-types-usage-example' into 'master' · 7e47a8e6
      Achilleas Pipinellis authored
      Docs: Update documentation with CI variable types usage example
      
      See merge request gitlab-org/gitlab-ce!28515
      
      (cherry picked from commit 0702d4b6)
      
      706dfdb7 Add CI variable types usage example
      7b9a52c0 Update screenshot to match latest CI variables UI
      83cd1a76 Fix typo in CI variables docs
      3e5b4ce8 Apply suggestion to doc/ci/variables/README.md
      b7d820a4 Apply suggestion to doc/ci/variables/README.md
      9d2bef55 Apply suggestion to doc/ci/variables/README.md
      cb637cc9 Apply suggestion to doc/ci/variables/README.md
      c13648a8 Apply suggestion to doc/ci/variables/README.md
      121917cb Apply suggestion to doc/ci/variables/README.md
      cf95e5ec Apply suggestion to doc/ci/variables/README.md
      556d5ebf Apply suggestion to doc/ci/variables/README.md
      7e47a8e6
    • Achilleas Pipinellis's avatar
      Merge branch 'docs-update-deploy-chat-notifications' into 'master' · 1de44238
      Achilleas Pipinellis authored
      Update Docs for Chat Notifications
      
      Closes #61867
      
      See merge request gitlab-org/gitlab-ce!28510
      
      (cherry picked from commit f66aa212)
      
      2770302d Update documentation for chat notifications on deployment events
      1de44238
    • John Jarvis's avatar
      Merge branch 'jc-bump-gitaly-stderr-log-fix' into '11-11-stable-patch-3' · 9e00ca21
      John Jarvis authored
      Update Gitaly to 1.42.4
      
      See merge request gitlab-org/gitlab-ce!29310
      9e00ca21
  2. 06 Jun, 2019 1 commit
    • John Cai's avatar
      Update Gitaly to 1.42.4 · f71e4a4a
      John Cai authored
      This patch of Gitaly includes a fix of the stderr logger writer to fix a
      panic that occured during an edge case.
      f71e4a4a
  3. 04 Jun, 2019 5 commits
  4. 03 Jun, 2019 10 commits
  5. 30 May, 2019 4 commits
  6. 29 May, 2019 3 commits
  7. 28 May, 2019 12 commits
  8. 27 May, 2019 1 commit
    • Kerri Miller's avatar
      Reject slug+uri concat if slug is deemed unsafe · d71a4d5c
      Kerri Miller authored
      First reported:
        https://gitlab.com/gitlab-org/gitlab-ce/issues/60143
      
      When the page slug is "javascript:" and we attempt to link to a relative
      path (using `.` or `..`) the code will concatenate the slug and the uri.
      This MR adds a guard to that concat step that will return `nil` if the
      incoming slug matches against any of the "unsafe" slug regexes;
      currently this is only for the slug "javascript:" but can be extended if
      needed. Manually tested against a non-exhaustive list from OWASP of
      common javascript XSS exploits that have to to with mangling the
      "javascript:" method, and all are caught by this change or by existing
      code that ingests the user-specified slug.
      d71a4d5c
  9. 24 May, 2019 1 commit