- 29 Aug, 2019 40 commits
-
-
Robert Speicher authored
-
GitLab Bot authored
-
Michael Kozono authored
Make it harder to delete issuables accidentally Closes #62387 See merge request gitlab-org/gitlab-ce!32376
-
Michael Kozono authored
Make it harder to delete issuables accidentally Closes gitlab-ce#62387 See merge request gitlab-org/gitlab-ee!15794
-
GitLab Release Tools Bot authored
Filter out old system notes for epics in notes api endpoint response See merge request gitlab/gitlab-ee!1057
-
GitLab Release Tools Bot authored
Use image proxy to mitigate stealing ip addresses See merge request gitlab/gitlab-ee!1068
-
GitLab Release Tools Bot authored
Fix HTML injection for label description See merge request gitlab/gitlab-ee!1100
-
GitLab Release Tools Bot authored
Limit the size of issuable description and comments See merge request gitlab/gitlab-ee!1119
-
GitLab Release Tools Bot authored
Permission fix for MergeRequestsController#pipeline_status See merge request gitlab/gitlab-ee!1128
-
GitLab Release Tools Bot authored
Enforce max chars and max render time in markdown math See merge request gitlab/gitlab-ee!1138
-
GitLab Release Tools Bot authored
Require a captcha after unique failed logins from the same IP See merge request gitlab/gitlab-ee!1148
-
GitLab Release Tools Bot authored
Fix DNS rebind vulnerability for JIRA integration See merge request gitlab/gitlab-ee!1163
-
GitLab Release Tools Bot authored
Project visibility restriction bypass See merge request gitlab/gitlab-ee!1174
-
GitLab Release Tools Bot authored
Introduce JobActivity limit for alive jobs Closes #376 See merge request gitlab/gitlab-ee!1182
-
GitLab Release Tools Bot authored
DNS Rebind SSRF in Kubernetes Integration See merge request gitlab/gitlab-ee!1188
-
GitLab Release Tools Bot authored
Clear reset_password_tokens when login (email or username) change See merge request gitlab/gitlab-ee!1193
-
GitLab Release Tools Bot authored
Prevent disclosure of merge request id via email See merge request gitlab/gitlab-ee!1198
-
GitLab Release Tools Bot authored
Restrict MergeRequests#test_reports to authenticated users with read-access on Builds See merge request gitlab/gitlab-ee!1203
-
GitLab Release Tools Bot authored
Add direct upload support for personal snippets See merge request gitlab/gitlab-ee!1208
-
GitLab Release Tools Bot authored
admin_group authorization for Groups::RunnersController See merge request gitlab/gitlab-ee!1213
-
GitLab Release Tools Bot authored
Re-escape the whole HTML content when finding HTML references See merge request gitlab/gitlab-ee!1217
-
GitLab Release Tools Bot authored
Send TODOs for comments on commits correctly See merge request gitlab/gitlab-ee!1219
-
GitLab Release Tools Bot authored
Gitaly: ignore git redirects See merge request gitlab/gitlab-ee!1226
-
GitLab Release Tools Bot authored
Avoid exposing unaccessible repo data upon GFM post processing See merge request gitlab/gitlab-ee!1235
-
GitLab Bot authored
-
Clement Ho authored
Update Security Dashboard layout for improved usability Closes #12846 See merge request gitlab-org/gitlab-ee!15050
-
Mayra Cabrera authored
Add a close issue slack slash command See merge request gitlab-org/gitlab-ce!32150
-
Sarah Yasonik authored
Adds a slash command in slach for closing issues. See https://docs.gitlab.com/ee/integration/slash_commands.html for documentation on the wider feature set.
-
GitLab Bot authored
-
Mayra Cabrera authored
CE: Update the ES indexer to v1.3.0 See merge request gitlab-org/gitlab-ce!32406
-
Nick Thomas authored
-
Mayra Cabrera authored
Update the ES indexer to v1.3.0 See merge request gitlab-org/gitlab-ee!15821
-
Nick Thomas authored
-
Douglas Barbosa Alexandre authored
Resolve "gitlab.pot needs to be regenerated" Closes #14039 See merge request gitlab-org/gitlab-ee!15831
-
Stan Hu authored
Previously submitting a DELETE request to an issuable URL would be enough to destroy it, but this should require human confirmation. We now require that the `destroy_confirm` parameter is set to a truthy value before this can complete. In addition, we log a Sentry error if a deletion arrived without confirmation. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62387
-
Stan Hu authored
Previously submitting a DELETE request to an issuable URL would be enough to destroy it, but this should require human confirmation. We now require that the `destroy_confirm` parameter is set to a truthy value before this can complete. In addition, we log a Sentry error if a deletion arrived without confirmation. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62387
-
GitLab Bot authored
-
Nick Thomas authored
fix: show preferred commit email in empty project page See merge request gitlab-org/gitlab-ce!32182
-
Yuping Zuo authored
-
Mike Greiling authored
Bring text mail for new issue & MR more in line See merge request gitlab-org/gitlab-ce!32254
-