Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/65499

Closes #65499

See merge request gitlab-org/gitlab-ce!31458

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/62446

Closes #62446

See merge request gitlab-org/gitlab-ce!31448

Update DinD example for 19.03.1

See merge request gitlab-org/gitlab-ce!31051

Merge branch '33401-follow-up-from-add-prometheus-metrics-endpoint-and-basic-infrastructure-to-meter-code' into 'master'

Clean tmpdirs in metrics endpoint specs

Closes #33401

See merge request gitlab-org/gitlab-ce!31529

Productivity Analytics: Move specs to correct subfolder

See merge request gitlab-org/gitlab-ee!15025

- Move actions and mutations to /filters

Fix assorted links in the docs

See merge request gitlab-org/gitlab-ce!31559

Fix links as discovered by the lint in the docs project

Remove duplicate 'Issue Boards' from export page

See merge request gitlab-org/gitlab-ee!15027

Add support for Content-Security-Policy

Closes #65330

See merge request gitlab-org/gitlab-ce!31402

[EE] Add support for Content-Security-Policy

Closes gitlab-ce#65330

See merge request gitlab-org/gitlab-ee!14975

Provide separate namespaces for each project environment

See merge request gitlab-org/gitlab-ce!30711

Kubernetes deployments on new clusters will now have
a separate namespace per project environment, instead
of sharing a single namespace for the project.

Behaviour of existing clusters is unchanged.

All new functionality is controlled by the
:kubernetes_namespace_per_environment feature flag,
which is safe to enable/disable at any time.

Follow-up: Tweak line to improve badge placement

Closes #65417

See merge request gitlab-org/gitlab-ce!31528

Follow-Up: Change code blocks to shell type

Closes #65605

See merge request gitlab-org/gitlab-ce!31526

Added a Secure E2E test for auto-remediation

Closes #9192

See merge request gitlab-org/gitlab-ee!14945

Updated selectors where necessary.

Updated fixture and tests that have changed results.

Resolve "Use Gitlab::HTTP in PrometheusClient instead of RestClient"

Closes #60024

See merge request gitlab-org/gitlab-ce!31053

- Closes #60024

- Change PrometheusClient.new to accept a base url instead of an
  already created RestClient

- Use Gitlab::HTTP in PrometheusClient instead of creating RestClient
  in PrometheusService

- Move http_options from PrometheusService to
  PrometheusClient (follow_redirects: false)

- ensure that base urls don't have the trailing slash

- Created a `PrometheusClient#url` method that might not be strictly
  required

- Change rescued exceptions from RestClient::* to
  HTTParty::ResponseError where possible and StandardError for the
  rest

A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.

To support this, we need to change all `:javascript` HAML filters to the
following form:

```
= javascript_tag nonce: true do
  :plain
    ...
```

We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.

Docs - Update link in SSL_TLS Certificates Page to Let's Encrypt Intergration

See merge request gitlab-org/gitlab-ce!30984

A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.

To support this, we need to change all `:javascript` HAML filters to the
following form:

```
= javascript_tag nonce: true do
  :plain
    ...
```

We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.

Fix nil take regression

Closes #65725

See merge request gitlab-org/gitlab-ce!31554

Add project security dashboard vulnerabilities endpoints

Closes #12244 and #12381

See merge request gitlab-org/gitlab-ee!14896

* Adds Projects::Security::VulnerabilitiesController
* Adds Projects::Security::DashboardHelper
* Adds project security dashboard vulnerabilities routes
* Includes Vulnerable module in Project

Fixes https://gitlab.com/gitlab-org/gitlab-ee/issues/12381
and https://gitlab.com/gitlab-org/gitlab-ee/issues/12244