Commits · 6ea2841e42dccfcb59ff5acbd7f3e32b985fde71 · nexedi / gitlab-ce

30 Aug, 2019 13 commits
- Merge branch 'docs-dotcom-add-limit' into 'master' · 6ea2841e
  Evan Read authored Aug 30, 2019
```
Docs: Add raw endpoints limit for GL.com settings

See merge request gitlab-org/gitlab-ce!32288
```
  6ea2841e
- Docs: Add raw endpoints limit for GL.com settings · bc0e1fe6
  Cynthia Ng authored Aug 30, 2019
  
  bc0e1fe6
- Merge branch 'docs-markdown-fixes' into 'master' · 153f25af
  Evan Read authored Aug 30, 2019
```
Fix broken markdown in various docs

See merge request gitlab-org/gitlab-ce!32440
```
  153f25af
- Fix broken markdown in various docs · 03b152c5
  Marcel Amirault authored Aug 30, 2019
  
  03b152c5
- Merge branch 'patch-79' into 'master' · bfdb41be
  Ray Paik authored Aug 30, 2019
```
Fixed spelling

See merge request gitlab-org/gitlab-ce!32434
```
  bfdb41be
- Merge branch 'revert-79fa2cd9' into 'master' · 98f2ab29
  Evan Read authored Aug 30, 2019
```
Revert "Merge branch 'nik-api-snippets-fix' into 'master'"

Closes #66673

See merge request gitlab-org/gitlab-ce!32295
```
  98f2ab29
- Merge branch 'docs-markdownlint-fixes-2' into 'master' · 329839be
  Evan Read authored Aug 30, 2019
```
Fix markdown in various docs (part 2)

See merge request gitlab-org/gitlab-ce!32269
```
  329839be
- Fix markdown in various docs · 513d3f58
  Marcel Amirault authored Aug 30, 2019
```
Clean up issues that may cause the docs-lint
test to fail, such as trailing whitespace, no
EOF newline, blockquotes, etc
```
  513d3f58
- Merge branch 'lint/fix-failing-markdown-file' into 'master' · e348def8
  Evan Read authored Aug 30, 2019
```
Add second space to lines failing lint

See merge request gitlab-org/gitlab-ce!32435
```
  e348def8
- Remove spaces from lines failing lint · e92b8219
  Thomas Randolph authored Aug 29, 2019
  
  e92b8219
- Merge branch 'fix-test-design-link' into 'master' · 13627ca9
  Evan Read authored Aug 30, 2019
```
Broken Link to Test Design

See merge request gitlab-org/gitlab-ce!32279
```
  13627ca9
- Merge branch 'docs-ado-extra-build-args' into 'master' · 25341f58
  Evan Read authored Aug 30, 2019
```
Document the AUTO_DEVOPS_BUILD_IMAGE_EXTRA_ARGS project variable

See merge request gitlab-org/gitlab-ce!32057
```
  25341f58
- Document the AUTO_DEVOPS_BUILD_IMAGE_EXTRA_ARGS project variable · 6f47a6d1
  Hordur Freyr Yngvason authored Aug 30, 2019
  
  6f47a6d1
29 Aug, 2019 27 commits
- Merge branch 'ce-backport-of-ml-web-terminal-spec-qa' into 'master' · 739ecdb6
  Dan Davison authored Aug 29, 2019
```
Backport changes from EE MR 8186

See merge request gitlab-org/gitlab-ce!31707
```
  739ecdb6
- Merge branch 'patch-78' into 'master' · ee18bf57
  Ray Paik authored Aug 29, 2019
```
Fixed spelling

See merge request gitlab-org/gitlab-ce!32432
```
  ee18bf57
- Merge branch 'patch-77' into 'master' · 0aee1420
  Ray Paik authored Aug 29, 2019
```
Fixed spelling

See merge request gitlab-org/gitlab-ce!32431
```
  0aee1420
- Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq · 7698d405
  Robert Speicher authored Aug 29, 2019
  
  7698d405
- Merge branch 'sh-add-delete-confirmation' into 'master' · fa160c26
  Michael Kozono authored Aug 29, 2019
```
Make it harder to delete issuables accidentally

Closes #62387

See merge request gitlab-org/gitlab-ce!32376
```
  fa160c26
- Fixed spelling · be685251
  Shan authored Aug 29, 2019
  
  be685251
- Fixed spelling · 93414068
  Shan authored Aug 29, 2019
  
  93414068
- Fixed spelling · 225fba83
  Shan authored Aug 29, 2019
  
  225fba83
- Merge branch 'security-enable-image-proxy' into 'master' · 09095625
  GitLab Release Tools Bot authored Aug 29, 2019
```
Use image proxy to mitigate stealing ip addresses

Closes #2812

See merge request gitlab/gitlabhq!2926
```
  09095625
- Merge branch 'security-2853-prevent-comments-on-private-mrs' into 'master' · 21b5239a
  GitLab Release Tools Bot authored Aug 29, 2019
```
Ensure only authorised users can create notes on merge requests and issues

See merge request gitlab/gitlabhq!3137
```
  21b5239a
- Merge branch 'security-epic-notes-api-reveals-historical-info-ce-master' into 'master' · 5a008d13
  GitLab Release Tools Bot authored Aug 29, 2019
```
Filter out old system notes for epics in notes api endpoint response

See merge request gitlab/gitlabhq!3224
```
  5a008d13
- Merge branch 'security-personal-snippets' into 'master' · 34c2b6ad
  GitLab Release Tools Bot authored Aug 29, 2019
```
Add direct upload support for personal snippets

See merge request gitlab/gitlabhq!3226
```
  34c2b6ad
- Merge branch 'security-fix-html-injection-for-label-description-ce-master' into 'master' · 170cb8bc
  GitLab Release Tools Bot authored Aug 29, 2019
```
Fix HTML injection for label description

See merge request gitlab/gitlabhq!3250
```
  170cb8bc
- Merge branch 'security-fix_jira_ssrf_vulnerability' into 'master' · 7d6ec7f7
  GitLab Release Tools Bot authored Aug 29, 2019
```
Fix DNS rebind vulnerability for JIRA integration

See merge request gitlab/gitlabhq!3266
```
  7d6ec7f7
- Merge branch 'security-61974-limit-issue-comment-size' into 'master' · b01c7ad2
  GitLab Release Tools Bot authored Aug 29, 2019
```
Limit the size of issuable description and comments

See merge request gitlab/gitlabhq!3267
```
  b01c7ad2
- Merge branch 'security-59549-add-capcha-for-failed-logins' into 'master' · a5b2a378
  GitLab Release Tools Bot authored Aug 29, 2019
```
Require a captcha after unique failed logins from the same IP

See merge request gitlab/gitlabhq!3270
```
  a5b2a378
- Merge branch 'security-mr-head-pipeline-leak' into 'master' · e20fb7cb
  GitLab Release Tools Bot authored Aug 29, 2019
```
Permission fix for MergeRequestsController#pipeline_status

See merge request gitlab/gitlabhq!3274
```
  e20fb7cb
- Merge branch 'security-katex-dos-master' into 'master' · 4ed9802a
  GitLab Release Tools Bot authored Aug 29, 2019
```
Enforce max chars and max render time in markdown math

See merge request gitlab/gitlabhq!3277
```
  4ed9802a
- Merge branch 'security-project-import-bypass' into 'master' · 7d6edff6
  GitLab Release Tools Bot authored Aug 29, 2019
```
Project visibility restriction bypass

See merge request gitlab/gitlabhq!3306
```
  7d6edff6
- Merge branch 'security-hide_merge_request_ids_on_emails' into 'master' · 53661b10
  GitLab Release Tools Bot authored Aug 29, 2019
```
Prevent disclosure of merge request id via email

See merge request gitlab/gitlabhq!3313
```
  53661b10
- Merge branch 'security-id-filter-timeline-activities-for-guests' into 'master' · fac22c13
  GitLab Release Tools Bot authored Aug 29, 2019
```
Add merge note type as cross reference

See merge request gitlab/gitlabhq!3319
```
  fac22c13
- Merge branch 'security-group-runners-permissions' into 'master' · be128484
  GitLab Release Tools Bot authored Aug 29, 2019
```
admin_group authorization for Groups::RunnersController

See merge request gitlab/gitlabhq!3325
```
  be128484
- Merge branch 'security-ci-metrics-permissions' into 'master' · 70818d3d
  GitLab Release Tools Bot authored Aug 29, 2019
```
Restrict MergeRequests#test_reports to authenticated users with read-access on Builds

See merge request gitlab/gitlabhq!3329
```
  70818d3d
- Merge branch 'security-sarcila-fix-weak-session-management' into 'master' · 4e8e402b
  GitLab Release Tools Bot authored Aug 29, 2019
```
Clear reset_password_tokens when login (email or username) change

See merge request gitlab/gitlabhq!3334
```
  4e8e402b
- Merge branch 'security-add-job-activity-limit-ce' into 'master' · a69aebcd
  GitLab Release Tools Bot authored Aug 29, 2019
```
Introduce JobActivity limit for alive jobs

Closes gitlab-ee#376

See merge request gitlab/gitlabhq!3339
```
  a69aebcd
- Merge branch 'security-fix-markdown-xss' into 'master' · 61c9f078
  GitLab Release Tools Bot authored Aug 29, 2019
```
Re-escape the whole HTML content when finding HTML references

See merge request gitlab/gitlabhq!3340
```
  61c9f078
- Merge branch 'security-exposed-default-branch' into 'master' · df556bf2
  GitLab Release Tools Bot authored Aug 29, 2019
```
Avoid exposing unaccessible repo data upon GFM post processing

See merge request gitlab/gitlabhq!3344
```
  df556bf2