Dmitriy Zaporozhets and Marin Jankovski
650a7c73c4
Merge branch 'project-existence-leak' into 'master'
...
Don't leak information about private project existence via Git-over-SSH/HTTP.
Fixes #2040 and https://gitlab.com/gitlab-org/gitlab-ce/issues/343 .
Both `Grack::Auth` (used by Git-over-HTTP) and `Api::Internal /allowed` (used by gitlab-shell/Git-over-SSH) now return a generic "Not Found" error when the project exists but the user doesn't have access to it.
See merge request !1578
2015-03-03 14:56:31 -08:00
Marin Jankovski and Dmitriy Zaporozhets
dd9d17a6e3
Merge branch 'upload-xss-access-control' into 'master'
...
Fix note attachments XSS and access control
Replaces the reverted #1528 , as proposed in https://gitlab.com/gitlab-org/omnibus-gitlab/issues/434 , as discussed with @dzaporozhets and as summarized in #2032 .
@marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged?
See merge request !1553
2015-02-20 14:49:07 -08:00
Marcin Kulik and Dmitriy Zaporozhets
fcabff63f2
Add gitorious.org importer
2015-02-20 14:47:38 -08:00
Dmitriy Zaporozhets and Dmitriy Zaporozhets
3360ee876a
Merge branch 'improve-web-hooks' into 'master'
...
Improve web hooks
* add git_http_url and git_ssh_url to project web hook
* add visibility_level to project web hook
* add documentation about project visibility_level in API
Fixes #2018 , #2030
cc @sytse
See merge request !1560
2015-02-20 14:45:26 -08:00
Douwe Maan and Dmitriy Zaporozhets
e9d995ba67
Fix push access check when not signed in.
2015-02-18 15:55:31 -08:00
Dmitriy Zaporozhets
56df257456
DB performance improvements to GitLab
2015-02-18 15:54:58 -08:00
Douwe Maan
25e44d0530
Allow users that signed up via OAuth to set their password in order to use Git over HTTP(S).
2015-02-13 14:44:42 +01:00
Dmitriy Zaporozhets
2ff1b8e68d
Merge branch 'clean-oauth-username' into 'master'
...
Clean username acquired from OAuth/LDAP.
Fixes #1967 .
Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/813
See merge request !1500
2015-02-13 00:39:34 +00:00
Douwe Maan
6685661b54
Clean username acquired from OAuth/LDAP.
...
Fixes #1967 .
2015-02-12 21:05:27 +01:00
Marin Jankovski
29e606deec
Add ExternalIssue base model to make issue referencing more robust for external issue trackers.
2015-02-11 09:21:57 -08:00
Nikita Verkhovin
8681cb3137
Add labels notes
2015-02-08 22:35:41 +06:00
Dmitriy Zaporozhets
89f8020fe1
Merge branch 'mention-groups'
...
Conflicts:
CHANGELOG
2015-02-06 16:45:37 -08:00
Valery Sizov
b3c90dd514
GitHub importer refactoring
2015-02-05 21:48:21 -08:00
Valery Sizov
1ac20698a5
gitlab.com importer: refactorig
2015-02-05 17:03:43 -08:00
Valery Sizov
93585661b1
code folding
2015-02-05 12:50:34 -08:00
Valery Sizov
33349dd549
GitLab.com integration: refactoring
2015-02-05 12:50:34 -08:00
Valery Sizov
18231b0bb3
GitLab.com integration: refactoring
2015-02-05 12:50:34 -08:00
Valery Sizov
7ddba92a39
Gitlab integration: added tests
2015-02-05 12:50:34 -08:00
Valery Sizov
5194214e3a
GitLab integration. Importer
2015-02-05 12:50:34 -08:00
Douwe Maan
9910b7ff99
Allow groups to be mentioned.
...
Resolves #1673 .
2015-02-05 19:10:52 +01:00
Dmitriy Zaporozhets
490cf7bfce
Improve protected branches selectbox options
2015-02-03 18:12:20 -08:00
Dmitriy Zaporozhets
635ebac606
Merge branch 'master' into mwessel/gitlab-ce-configure-protection
2015-02-03 17:54:33 -08:00
Dmitriy Zaporozhets
61cc6a9244
Rubocop: indentation fixes Yay!!!
2015-02-02 21:59:28 -08:00
Dmitriy Zaporozhets
d04344373b
Rubocop: no trailing newlines
2015-02-02 21:53:27 -08:00
Dmitriy Zaporozhets
7d48205c1a
Rubocop: comment indentation
2015-02-02 21:34:16 -08:00
Dmitriy Zaporozhets
cc39bca3fa
Rubocop: Style/AlignHash enabled
2015-02-02 21:15:44 -08:00
Dmitriy Zaporozhets
c427bf08e4
Rubocop: Style/AlignArray enabled
2015-02-02 20:58:28 -08:00
Dmitriy Zaporozhets
e890582681
Rubocop enabled for: Use spaces inside hash literal braces
2015-02-02 20:36:54 -08:00
Dmitriy Zaporozhets
4f1d1fc51b
Convert hashes to ruby 1.9 style
2015-02-02 19:30:09 -08:00
Dmitriy Zaporozhets
f1cf49218f
Improve contribution calendar on user page
...
* cache user contributions for day
* ignore forks in calendar contribtuions
2015-01-29 17:07:44 -08:00
Marco Wessel
20e269cb92
Merge branch 'master' of gitlab.com:gitlab-org/gitlab-ce into configure-protection
...
Conflicts:
CHANGELOG
db/schema.rb
2015-01-30 00:16:24 +01:00
Dmitriy Zaporozhets
ca701a9649
Improvements to LDAP::User model
...
* method #changed? also tracks changes of identites (fixes issue with email mapping)
* find ldap identity before initialize one
2015-01-29 13:28:41 -08:00
Dmitriy Zaporozhets
c9f18d4587
Make sure we dont have exception on date parsing
2015-01-29 01:03:20 -08:00
Dmitriy Zaporozhets
a9288e554e
Cleanup and make contribution calendar faster
2015-01-29 00:53:43 -08:00
Dmitriy Zaporozhets
6e1f9e746c
Merge branch 'gitlab_importer' into 'master'
...
Ability to clone project using oauth2 token
See merge request !1447
2015-01-29 07:03:30 +00:00
Dmitriy Zaporozhets
c39f80bdb4
Refactor commit calendar a bit. Fixed dates
2015-01-28 23:00:41 -08:00
Dmitriy Zaporozhets
815e9aa283
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into haynes/gitlab-ce-commit_calendar
2015-01-28 22:52:44 -08:00
Dmitriy Zaporozhets
953c1fff8f
Be more careful with parsing changes from gitlab-shell
2015-01-28 17:00:40 -08:00
Hannes Rosenögger
792ced2f41
Add a commit calendar to the user profile
2015-01-29 01:25:26 +01:00
Valery Sizov
54f6d8c7b5
an ability to clone project with oauth2 token
2015-01-28 15:57:31 -08:00
Dmitriy Zaporozhets
fc17b440f9
Merge branch 'move_external_issue_tracker_away_from_yml_config' into 'master'
...
Move external issue tracker away from yml config
See merge request !1442
2015-01-27 20:57:48 +00:00
Marin Jankovski
0da59cb55b
Merge branch 'master' into move_external_issue_tracker_away_from_yml_config
...
Conflicts:
app/models/project.rb
spec/models/project_spec.rb
2015-01-26 22:12:53 -08:00
Dmitriy Zaporozhets
a3d879d427
Refactor web editor
2015-01-26 20:57:42 -08:00
Marin Jankovski
00a0d5aeea
Move repetition to the parent.
2015-01-26 16:24:11 -08:00
Dmitriy Zaporozhets
3e47ea5064
Files::CreateService can now commit file to empty repository
2015-01-26 13:31:24 -08:00
Marin Jankovski
65e700472b
Update the issue tracker attribute on issue tracker change.
2015-01-26 11:39:32 -08:00
Marco Wessel
afce47923c
actually fix indentation
2015-01-25 18:38:35 +01:00
Marco Wessel
b20fc14133
Fix indentation
2015-01-25 18:34:02 +01:00
Marco Wessel
aad6ceaef9
Allow configuring protection of the default branch upon first push
2015-01-25 17:09:10 +01:00
Marin Jankovski
c70dcd2907
Merge branch 'master' into move_external_issue_tracker_away_from_yml_config
2015-01-23 12:38:46 -08:00