Robert Speicher
9e7a9c63a5
Further limit the limited whitelist for project/group descriptions
2015-06-02 13:41:12 -04:00
Robert Speicher
023dd2907b
Add a pipeline context option for SanitizationFilter
...
When this option is `:description`, we use a more restrictive whitelist.
This is used for Project and Group description fields.
2015-06-02 13:04:10 -04:00
Marin Jankovski
c4cb563e98
Merge pull request #8730 from drunkard/master
...
Specify shell while run me as git user
2015-06-02 16:19:31 +02:00
Dmitriy Zaporozhets
d684b11054
Remove unnecessary satellite files and add CHANGELOG item
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2015-06-02 12:07:00 +02:00
Dmitriy Zaporozhets
8ad5f08483
Remove now unnecessary satelittes logic for creating and editing file with web editor
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2015-06-02 10:56:22 +02:00
Stan Hu
85145d1d77
Disable changing of the source branch in merge request update API
2015-05-29 09:40:35 -07:00
Robert Speicher
330c25385b
Update jasmine:ci task to use teaspoon
2015-05-28 18:22:33 -04:00
Dmitriy Zaporozhets
05a44dcb8b
Merge branch 'user-destroy-wo-groups' into 'master'
...
You can not remove user if he/she is an only owner of group
To prevent loose of group data you need to transfer or remove group
first before you can remove user
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
See merge request !730
2015-05-28 13:14:58 +00:00
Dmitriy Zaporozhets
499154518a
You can not remove user if he/she is an only owner of group
...
To prevent loose of group data you need to transfer or remove group
first before you can remove user
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2015-05-28 12:00:02 +02:00
Robert Speicher
7424d2fa5b
Add ExternalLinkFilter to Markdown pipeline
...
Forces a `rel="nofollow"` attribute on all external links.
2015-05-27 15:39:08 -04:00
Robert Speicher
5a9c5520d9
Make use of to_reference in more specs
2015-05-26 15:49:22 -04:00
Robert Speicher
81a09bc74c
Support only double quotes for multi-word label references
2015-05-26 15:49:20 -04:00
Robert Speicher
b88da58cb6
Add reference_pattern to Referable models
2015-05-26 15:48:32 -04:00
Robert Speicher
9d032cddf5
Correct the ReferenceFilter html/pipeline/filter require
2015-05-26 15:48:31 -04:00
Dmitriy Zaporozhets
08102ad748
Merge branch 'rs-issue-1690' into 'master'
...
Better handle label references that aren't actually references
Fixes #1690
See merge request !705
2015-05-26 14:35:54 +00:00
Douwe Maan
9bb00cd77f
Merge branch 'get-monkey-off-my-rack-attack' into 'master'
...
Remove Rack Attack monkey patches and bump to version 4.3.0
I finally got these monkey patches into Rack Attack v4.3.0, so GitLab no longer needs them. Hooray!
See: https://github.com/kickstarter/rack-attack/pull/128
See merge request !693
2015-05-26 07:43:57 +00:00
Robert Speicher
b263a33c80
Better handle label references that aren't actually references
...
Fixes #1690
2015-05-25 16:06:34 -04:00
Stan Hu
3b22cfe600
Remove Rack Attack monkey patches and bump to version 4.3.0
2015-05-22 16:25:03 -04:00
Stan Hu
deeff56967
Add support for Webhook note events
...
Closes https://github.com/gitlabhq/gitlabhq/issues/6745
2015-05-21 23:48:16 -04:00
Robert Speicher
212fe14c65
Customize the sanitization whitelist only once
...
Fixes #1651
2015-05-20 21:16:11 -04:00
Robert Speicher
8ee382087d
Subclass TaskList::Filter to fix a bug
...
Instead of using a fork, we subclass the filter and only apply the
`task-list` class to list items that actually are task lists.
Closes #1645
See https://github.com/github/task_list/pull/60
2015-05-20 12:08:33 -04:00
Marin Jankovski
509a32f466
Merge branch 'shell-secret-path' of https://github.com/jirutka/gitlabhq into jirutka-shell-secret-path
2015-05-19 14:37:35 +02:00
Jakub Jirutka
b0659c1b07
Simplify and unify helpers for rendering markup
2015-05-18 22:52:13 +02:00
Jakub Jirutka
daa0925016
Rename MarkdownHelper to MarkupHelper
2015-05-18 22:51:56 +02:00
Jakub Jirutka
8dbc4746fe
Handle AsciiDoc better, reuse HTML pipeline filters ( fixes #9263 )
2015-05-18 20:48:03 +02:00
Nikita Verkhovin
241f5971ba
Add search issues/MR by number
2015-05-18 13:09:13 +06:00
Jakub Jirutka
ed3298fc01
Allow to configure gitlab_shell_secret location
2015-05-16 21:46:06 +02:00
Fotis Gimian and Jeroen van Baarsen
d74673fd43
Ensure that the first added admin performs repository imports
2015-05-15 13:01:10 +02:00
Dmitriy Zaporozhets
9c6f4a2351
Merge branch 'dashboard-references' into 'master'
...
Fix reference links in dashboard activity and ATOM feeds.
References like `@user` were not linked on the dashboard activity feed and in Atom feeds, because the reference parser depends on `@project` which isn't set in those situations.
This MR passes the project in question to the reference parsers in an option.
cc @rspeicher
See merge request !653
2015-05-15 09:59:26 +00:00
Dmitriy Zaporozhets
740dc41250
Merge branch 'project_api_order' into 'master'
...
Add order option for projects API
https://dev.gitlab.org/gitlab/gitlab-ci/issues/222
See merge request !656
2015-05-14 20:25:39 +00:00
Dmitriy Zaporozhets
947231a461
Merge branch 'rs-relative-link-filter' into 'master'
...
Minor RelativeLinkFilter cleanup
See merge request !649
2015-05-14 14:37:43 +00:00
Dmitriy Zaporozhets
c2ee828c19
Merge branch 'omniauth-csrf' into 'master'
...
Protect OmniAuth request phase against CSRF.
Addresses #2268 .
See merge request !1793
2015-05-14 14:22:26 +00:00
Valery Sizov
7c3ca86370
Add order option for projects API
2015-05-14 15:49:09 +03:00
Douwe Maan
cd52cef1c0
Fix reference links in dashboard activity and ATOM feeds.
2015-05-14 13:05:33 +02:00
Robert Speicher
7f2fb72a0a
Minor RelativeLinkFilter cleanup
2015-05-13 14:08:37 -04:00
Jacob Vosmaer
c291ff9c6f
Use SIGKILL by default in Sidekiq::MemoryKiller
...
This makes the memory growth-triggered Sidekiq restarts more reliable by
reducing the chance that Sidekiq ends up in a state where it is not
accepting new jobs but also not shutting down: SIGKILL is more likely to
work than SIGTERM.
2015-05-13 17:09:12 +02:00
Dmitriy Zaporozhets
8ad91d5840
Merge branch 'text-batch-1' into 'master'
...
Batch 1 of text improvements
Batch 1 of changes from my effort at !635 to walk through every piece of text in GitLab and see if it can be improved.
This batch includes:
- Improve text on error pages.
- Improve Git access error messages.
- Improve description of branch protection levels.
- Improve OAuth signup error message.
- Improve OAuth application flash messages.
cc @rspeicher
See merge request !642
2015-05-13 12:05:17 +00:00
Dmitriy Zaporozhets
63403019d2
Merge branch 'master' of github.com:gitlabhq/gitlabhq
2015-05-13 14:26:39 +03:00
Dmitriy Zaporozhets
f32a045ef4
Merge branch 'version-check' into 'master'
...
Version check
See merge request !1509
2015-05-13 11:17:16 +00:00
Dmitriy Zaporozhets
740716afd1
Merge pull request #9276 from jirutka/relative_link_filter
...
Extract handling of relative file links to its own HTML filter
2015-05-13 14:09:57 +03:00
Douwe Maan
c5e4b443ff
Fix GitAccess.
2015-05-13 09:46:22 +02:00
Douwe Maan
17a41547a0
Improve OAuth signup error message.
2015-05-13 09:41:56 +02:00
Douwe Maan
9eb45ccd55
Improve description of branch protection levels.
2015-05-13 09:41:55 +02:00
Douwe Maan
1f72c387c9
Improve Git access error messages.
2015-05-13 09:41:55 +02:00
Dmitriy Zaporozhets
8b9e3af8bf
Merge branch 'ad-block_auto_created_users' into 'master'
...
Don't accidentally unblock auto created users from Active Directory.
Fixes #1581 .
See merge request !638
2015-05-12 13:28:33 +00:00
Dmitriy Zaporozhets
ff13fb0ab5
Merge branch 'brakeman-level'
...
Conflicts:
lib/tasks/brakeman.rake
2015-05-12 13:21:11 +03:00
Douwe Maan
125cb9b866
Don't accidentally unblock auto created users from Active Directory.
2015-05-12 11:26:43 +02:00
Jakub Jirutka
b3276661f7
RelativeLinkFilter: refactor according to suggestions by @tsigo
2015-05-11 20:43:18 +02:00
Jacob Vosmaer
cae978a9e8
We would like to pass 'brakeman -w2'
2015-05-11 18:11:09 +02:00
Dmitriy Zaporozhets
b3f5c679b6
Replace host with real one
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2015-05-11 18:21:45 +03:00