Commit Graph
3 Commits
Author SHA1 Message Date
Marin Jankovski 1be453d66b User correct name for reject_blocked 2015-03-03 16:15:25 -08:00
Dmitriy Zaporozhets 3c858eff0c Allow non authenticated access to avatars 2015-02-23 23:28:50 -08:00
Marin JankovskiandDmitriy Zaporozhets dd9d17a6e3 Merge branch 'upload-xss-access-control' into 'master'
Fix note attachments XSS and access control

Replaces the reverted #1528, as proposed in https://gitlab.com/gitlab-org/omnibus-gitlab/issues/434, as discussed with @dzaporozhets and as summarized in #2032.

@marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged?

See merge request !1553
2015-02-20 14:49:07 -08:00