2 Commits

Include renames

Author	SHA1	Message	Date
Dmitriy Zaporozhets	3c858eff0c	Allow non authenticated access to avatars	2015-02-23 23:28:50 -08:00
Marin JankovskiandDmitriy Zaporozhets	dd9d17a6e3	Merge branch 'upload-xss-access-control' into 'master' ... Fix note attachments XSS and access control Replaces the reverted #1528, as proposed in https://gitlab.com/gitlab-org/omnibus-gitlab/issues/434, as discussed with @dzaporozhets and as summarized in #2032. @marin Could you take a look at the nginx config and apply it to Omnibus once this gets merged? See merge request !1553	2015-02-20 14:49:07 -08:00