[ci skip]

[ci skip]

Fixes RepositoryValidationService spec

See merge request gitlab-org/security/gitlab!696

Add 'Rspec' at the beginning of the spec

Lack of validations importing snippet repository from bundle

Closes #159

See merge request gitlab-org/security/gitlab!608

Do not show activity for users with private profiles

Closes #140

See merge request gitlab-org/security/gitlab!539

Check access when sending TODOs related to merge requests

Closes #177

See merge request gitlab-org/security/gitlab!667

Disable caching for wiki attachments

Closes #168

See merge request gitlab-org/security/gitlab!632

Fix null byte error in upload path

Closes #148

See merge request gitlab-org/security/gitlab!571

Resolve "Cross-Site Scripting In BitbucketServer Import"

Closes #69

See merge request gitlab-org/security/gitlab!243

Fix note author name rendering

Closes #173

See merge request gitlab-org/security/gitlab!651

Disable github import api by seetings

Closes #143

See merge request gitlab-org/security/gitlab!556

Fixed group deploy token API authorizations

Closes #172

See merge request gitlab-org/security/gitlab!644

Change from hybrid to JSON cookies serializer

Closes #171

See merge request gitlab-org/security/gitlab!641

JSON has been the default serializer since Rails 4.1. Hybrid
serializer was meant to allow backward compatibility when
upgrading pre-Rails 4.1. It's been some time since we upgraded
to Rails 4.1 so now we don't need the hybrid serializer anymore.
This also causes security concerns since the previous serializer
was Marshal.

Stored XSS on the Error Tracking page

Closes #145

See merge request gitlab-org/security/gitlab!563

Upgrade swagger-ui to solve XSS issues

Closes #170

See merge request gitlab-org/security/gitlab!577

Validate group names with Rails HTML sanitizer

Closes #149

See merge request gitlab-org/security/gitlab!572

Fix XSS in Banzai's `#data_attributes_for`

Closes #150

See merge request gitlab-org/security/gitlab!576

Update xterm js dependency to latest stable 3.X version

Closes #128

See merge request gitlab-org/security/gitlab!501

Update permissions for time tracking endpoints

Closes #153

See merge request gitlab-org/security/gitlab!587

Update Kaminari gem

Closes #152

See merge request gitlab-org/security/gitlab!575

Make sure user info is sanitized when rendered

Closes #151

See merge request gitlab-org/security/gitlab!579

Security fix project authorizations for security dashboard

Closes #144

See merge request gitlab-org/security/gitlab!561

Fixes pypi XSS

Closes #141

See merge request gitlab-org/security/gitlab!555

Remove append-right-48 utility class

See merge request gitlab-org/gitlab!35545

Clarify use of private, public, internal groups

Closes #211811

See merge request gitlab-org/gitlab!35439

Improve docs related to LDAP membership lock

Closes #217478

See merge request gitlab-org/gitlab!35332

Static Site Editor can’t be opened in projects belonging to a subgroup

See merge request gitlab-org/gitlab!35378

This removes the append-right-48
utility class, no replacements were needed

Fix spelling mistakes

See merge request gitlab-org/gitlab!35321

Fix VSA code stage query

See merge request gitlab-org/gitlab!35324

Update docs for group/instance-level security dash

See merge request gitlab-org/gitlab!35533