- 30 Apr, 2020 3 commits
-
-
GitLab Release Tools Bot authored
Update and validate nuget package before updating uploaded file path Closes #113 See merge request gitlab-org/security/gitlab!481
-
David Fernandez authored
In particular, before updating the stored file path.
-
Alessio Caiazza authored
Disable :section_codeowners FF for failing spec See merge request gitlab-org/security/gitlab!489
-
- 29 Apr, 2020 1 commit
-
-
Kerri Miller authored
-
- 27 Apr, 2020 36 commits
-
-
GitLab Release Tools Bot authored
Merge branch 'security-validate-use-propery-workhorse-rewritten-fields-for-multipart-uploads' into 'master' Properly use workhorse rewritten fields and validate them Closes #116 See merge request gitlab-org/security/gitlab!433
-
John Skarbek authored
Change GitHub service integration token input to password Closes #34 See merge request gitlab-org/security/gitlab!97
-
John Skarbek authored
Apply CODEOWNER validations to web requests Closes #93 See merge request gitlab-org/security/gitlab!346
-
GitLab Release Tools Bot authored
Do not expose private group ID through group API Closes #118 See merge request gitlab-org/security/gitlab!447
-
GitLab Release Tools Bot authored
Fix doorkeeper CVE-2020-10187 Closes #115 See merge request gitlab-org/security/gitlab!429
-
GitLab Release Tools Bot authored
Security fix path traversal in nuget package repository Closes #113 See merge request gitlab-org/security/gitlab!428
-
GitLab Release Tools Bot authored
Prevent ES credentials leak Closes #111 See merge request gitlab-org/security/gitlab!413
-
GitLab Release Tools Bot authored
Fix rendering failure of Audit Event Closes #110 See merge request gitlab-org/security/gitlab!412
-
GitLab Release Tools Bot authored
Return only safe urls for mirrors Closes #101 See merge request gitlab-org/security/gitlab!389
-
GitLab Release Tools Bot authored
Check permissions for find_file_path Closes #103 See merge request gitlab-org/security/gitlab!392
-
GitLab Release Tools Bot authored
Ensure MR diff exists before codeowner check Closes #94 See merge request gitlab-org/security/gitlab!351
-
Grzegorz Bizon authored
Test terraform state API using Unicorn::TeeInput See merge request gitlab-org/gitlab!30334
-
Toon Claes authored
Create Ops Strategies User Lists Table See merge request gitlab-org/gitlab!30243
-
Jason Goodman authored
For applying user lists to a feature flag strategy
-
Stan Hu authored
Enable Vue LFS badge by default See merge request gitlab-org/gitlab!30469
-
Nathan Friend authored
Refactor to use parseBoolean See merge request gitlab-org/gitlab!30076
-
Nathan Friend authored
Update Geo Replicable Filter Nav See merge request gitlab-org/gitlab!29979
-
Phil Hughes authored
Remove duplicate QA attribute for burndown charts Closes #214686 See merge request gitlab-org/gitlab!29719
-
Phil Hughes authored
Added side margin to Clone button See merge request gitlab-org/gitlab!30471
-
Mark Florian authored
Merge branch '34817-issue-description-reverts-to-an-older-version-when-saving-without-prompting-the-conflict' into 'master' Updated autosave.js to save a lock version See merge request gitlab-org/gitlab!29349
-
Kerri Miller authored
We had previously not applied these to web requests, thinking them to be redundant. However, this poses a potential security issue, so we need to enable them. Format error msg for web requests We'll eventually clean this messaging up for the web, but the simplest thing we can do is remove the \n characters so that the API can send (and the front end display) the error message legibly; the \n were causing us to drop everything after the first line. It's ugly, but it is approved language and is FAR more helpful for a user to be able to resolve the issue.
-
Marcin Sedlak-Jakubowski authored
Docs: Update due_dates.md with quick actions reference See merge request gitlab-org/gitlab!30444
-
Marcin Sedlak-Jakubowski authored
-
Denys Mishunov authored
Update dependency @gitlab/ui to v13 See merge request gitlab-org/gitlab!30413
-
Kushal Pandya authored
Merge branch 'migrate_ee_spec_javascripts_vue_mr_widget_components_performance_issue_body_spec' into 'master' Migrate ee performance_issue_body_spec to Jest See merge request gitlab-org/gitlab!30452
-
Adam Hegyi authored
[FIXED] Set all NULL `lock_version` values to 0 PART 2 See merge request gitlab-org/gitlab!30305
-
Jarka Košanová authored
Migrate project snippets to the ghost user when the user is deleted See merge request gitlab-org/gitlab!28870
-
George Thomas authored
Closes #205772
-
Mark Fletcher authored
-
Denys Mishunov authored
Refactor package details installation tabs See merge request gitlab-org/gitlab!29946
-
James Lopez authored
Add :sectional_codeowners feature flag See merge request gitlab-org/gitlab!30311
-
GitLab Bot authored
-
Phil Hughes authored
Add link to customer portal from license dashboard See merge request gitlab-org/gitlab!30330
-
Denys Mishunov authored
On the Snippet view with "Clone" button visible, there's not enough right margin to comply with Pajamas. This MR fixes this issue.
-
Mario de la Ossa authored
Rails silently casts NULL `lock_version` values to 0 while doing optimistic locking, which causes false stale object exceptions. We had a monkey patch that would change it to check for [NULL, 0] but want to avoid monkey-patching if possible, which means we need to clean up our database values. This Commit is for CI objects (CI Stages, CI Builds, CI Pipelines)
-
Phil Hughes authored
Code Review Analytics: Add filters store See merge request gitlab-org/gitlab!30361
-