- 21 Aug, 2019 1 commit
-
-
Oswaldo Ferreira authored
When post-processing relative links to absolute links RelativeLinkFilter didn't take into consideration that internal repository data could be exposed for users that do not have repository access to the project. This commit solves that by checking whether the user can `download_code` at this repository, avoiding any processing of this filter if the user can't. Additionally, if we're processing for a group ( no project was given), we check if the user can read it in order to expand the href as an extra. That doesn't seem necessarily a breach now, but an extra check doesn't hurt as after all the user needs to be able to `read_group`.
-
- 19 Aug, 2019 39 commits
-
-
Mayra Cabrera authored
[CE] Add hooks to sync dev info to Jira using Connect App See merge request gitlab-org/gitlab-ce!31398
-
Heinrich Lee Yu authored
-
Douwe Maan authored
Doc: add project approval rule endpoints See merge request gitlab-org/gitlab-ce!31455
-
Mark Chao authored
-
Paul Slaughter authored
Backport: Fixed sidebar assignees scrolling bug See merge request gitlab-org/gitlab-ce!31932
-
Clement Ho authored
Replace inline scripts in links to prevent default See merge request gitlab-org/gitlab-ce!31838
-
Paul Slaughter authored
Fixed deletion of directories in Web IDE Closes #64677 See merge request gitlab-org/gitlab-ce!31727
-
Nick Thomas authored
Allow UsageData.count to use count_by: See merge request gitlab-org/gitlab-ce!30770
-
Rémy Coutable authored
Update qa/Dockerfile to be built from the project root context See merge request gitlab-org/gitlab-ce!31533
-
Annabel Dunstone Gray authored
Resolve "Discussion "expand"/"collapse" button is only clickable on one side" Closes #63905 See merge request gitlab-org/gitlab-ce!31730
-
Kamil Trzciński authored
Clean Sidekiq metrics from multiproc dir on start See merge request gitlab-org/gitlab-ce!31855
-
Aleksei Lipniagov authored
After moving the multiproc dir cleanup into `config.ru`:`warmup`, we stopped cleaning Sidekiq metrics dir which is not correct. This MR intended to fix that. More details: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/31668
-
Rémy Coutable authored
Merge branch '64630-add-warning-to-pages-domains-that-obtaining-deploying-ssl-certificates-through-let-s-encrypt-can-take-some-time' into 'master' Resolve "Add warning to pages domains that obtaining/deploying SSL certificates through Let's Encrypt can take some time" See merge request gitlab-org/gitlab-ce!31765
-
Stan Hu authored
Remove active_record_sane_schema_dumper gem Closes #66192 See merge request gitlab-org/gitlab-ce!31963
-
Rémy Coutable authored
Update Team labels definition in the Issue Workflow documentation See merge request gitlab-org/gitlab-ce!31811
-
Rémy Coutable authored
Signed-off-by: Rémy Coutable <remy@rymai.me>
-
Vladimir Shushlin authored
* Refactor some tests as well
-
Heinrich Lee Yu authored
We don't need this since this is already the default behavior of Rails since 5.1
-
Rémy Coutable authored
Signed-off-by: Rémy Coutable <remy@rymai.me>
-
Rémy Coutable authored
Signed-off-by: Rémy Coutable <remy@rymai.me>
-
Yorick Peterse authored
For the QA tests to use the new injection methods, we must require the initializer and ensure that the "constantize" method is available.
-
Kushal Pandya authored
Stage card ui component See merge request gitlab-org/gitlab-ce!31580
-
Ezekiel Kigbo authored
The existing stage list items are rendered in haml, migrating them to vuejs for future work. Fix alignment of median value Test for stage_nav_item.vue
-
Evan Read authored
Link to GitLab Performance Monitoring See merge request gitlab-org/gitlab-ce!31947
-
Evan Read authored
Improve new CI job permissions model docs See merge request gitlab-org/gitlab-ce!30696
-
Ben Bodenmiller authored
-
Evan Read authored
Docs fixup: Remove reference to old lib/api/ci dir See merge request gitlab-org/gitlab-ce!31937
-
Evan Read authored
Add `be_like_time` matcher to Testing Styleguide See merge request gitlab-org/gitlab-ce!31833
-
Evan Read authored
Link more issues in Design Management Limitations See merge request gitlab-org/gitlab-ce!31697
-
Evan Read authored
Add Documentation for Feature Flag Target Users Closes gitlab-ee#11459 See merge request gitlab-org/gitlab-ce!31918
-
Jason Goodman authored
Add screenshot
-
Achilleas Pipinellis authored
Migrate cycle analytics topic to new section See merge request gitlab-org/gitlab-ce!31827
-
Evan Read authored
Also fixes links to new section and refactors some existing content for the GitLab 12.2 changes.
-
Nick Thomas authored
Fix pipelines not always being created after a push Closes #66196 See merge request gitlab-org/gitlab-ce!31927
-
Evan Read authored
Update docs jira service page screenshot Closes #64778 See merge request gitlab-org/gitlab-ce!31911
-
Kemais Ehlers authored
Update doc/user/project/integrations/jira.md, doc/user/project/integrations/img/jira_service_page_v12_2.png files Deleted doc/user/project/integrations/img/jira_service_page.png
-
Evan Read authored
Escape vertical bars inside code blocks in quick_actions.md See merge request gitlab-org/gitlab-ce!31556
-
Jonathan Love authored
Escape vertical bars inside code blocks in quick_actions.md - Markdown parsing in previews and Gitlab.com appear to parse these as table delimiters even when inside a code block.
-
Heinrich Lee Yu authored
Use buttons instead of links with javascript:void(0)
-